« Volver al listado

CVE-2015-3317

Estado: ModificadaMedia (4.6)—

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

CA — Client AutomationCA — Network AND Systems ManagementCA — NSM JOB Management OptionCA — Universal JOB Management AgentCA — Virtual Assurance FOR Infrastructure ManagersCA — Workload Automation AE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-3317",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-06-17T10:59:02.227",
  "references": [
    {
      "url": "http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/75033",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1032512",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1032513",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/75033",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032512",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032513",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "CA Common Services, utilizado en CA Client Automation r12.5 SP01, r12.8, y r12.9; CA Network and Systems Management r11.0, r11.1, y r11.2; CA NSM Job Management Option r11.0, r11.1, y r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (también conocido como SystemEDGE) 12.6, 12.7, 12.8, y 12.9; y CA Workload Automation AE r11, r11.3, r11.3.5, y r11.3.6 en UNIX, no realiza correctamente la comprobación de límites, lo que permite a usuarios locales ganar privilegios a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:25:43.540",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ca:client_automation:r12.5:sp01:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A4F9C4A-8E42-4AE9-B0BB-1BB2C6463F5B"
            },
            {
              "criteria": "cpe:2.3:a:ca:client_automation:r12.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF0B8F40-7562-4FF4-BEB7-37F8A9CB6618"
            },
            {
              "criteria": "cpe:2.3:a:ca:client_automation:r12.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB5FAE9D-2ECB-41A0-8044-BD4B6A049941"
            },
            {
              "criteria": "cpe:2.3:a:ca:network_and_systems_management:r11.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2478964-609B-4CFF-9C7B-C41DC08FE1F9"
            },
            {
              "criteria": "cpe:2.3:a:ca:nsm_job_management_option:r11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E932DCC-21A7-43CC-92AF-42FDF4F6EE04"
            },
            {
              "criteria": "cpe:2.3:a:ca:nsm_job_management_option:r11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F1C1949-9C3A-4904-BF98-9CC99DAA4256"
            },
            {
              "criteria": "cpe:2.3:a:ca:nsm_job_management_option:r11.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "843C2083-4332-4D84-8C87-5C9CF90F3729"
            },
            {
              "criteria": "cpe:2.3:a:ca:universal_job_management_agent:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89CBCC3A-5510-4ACC-A57C-42AFF4513997"
            },
            {
              "criteria": "cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B99FE844-7F80-4466-9948-0EC2178A368F"
            },
            {
              "criteria": "cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46CC9F38-5BD0-449B-BB44-6B5505B0A0A0"
            },
            {
              "criteria": "cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99DD6651-7B25-4FA6-B579-932FB77BF3CD"
            },
            {
              "criteria": "cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC386DBF-5C12-4710-B79F-D8FF7AA13115"
            },
            {
              "criteria": "cpe:2.3:a:ca:workload_automation_ae:r11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79A8B3B9-4DAC-43CE-AA4A-33F3AD3B8CA7"
            },
            {
              "criteria": "cpe:2.3:a:ca:workload_automation_ae:r11.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "807CB824-9D95-46D7-81D5-C5186D476BC7"
            },
            {
              "criteria": "cpe:2.3:a:ca:workload_automation_ae:r11.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CD5392E-D9ED-46E7-AA9E-D80DF9D2392A"
            },
            {
              "criteria": "cpe:2.3:a:ca:workload_automation_ae:r11.3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCC05931-BF69-464C-BF3D-2BE53F00C5D2"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "61A4F116-1FEE-450E-99AE-6AD9ACDDE570"
            },
            {
              "criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"
            },
            {
              "criteria": "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "91F372EA-3A78-4703-A457-751B2C98D796"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}