CVE-2015-3317

Published: Jun 17, 2015Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.

Affected (16)

Products: Ca: Client Automation, Network And Systems Management, Nsm Job Management Option, Universal Job Management Agent, Virtual Assurance For Infrastructure Managers, Workload Automation Ae

6 products

Client Automation

Network And Systems Management

Nsm Job Management Option

Universal Job Management Agent

Virtual Assurance For Infrastructure Managers

Workload Automation Ae

Configuration A

16 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Ca Client Automation	Version r12.5 sp01
Ca Client Automation	Version r12.8
Ca Client Automation	Version r12.9
Ca Network And Systems Management	Version r11.2
Ca Nsm Job Management Option	Version r11.0
Ca Nsm Job Management Option	Version r11.1
Ca Nsm Job Management Option	Version r11.2
Ca Universal Job Management Agent	All versions
Ca Virtual Assurance For Infrastructure Managers	Version 12.6
Ca Virtual Assurance For Infrastructure Managers	Version 12.7
Ca Virtual Assurance For Infrastructure Managers	Version 12.8
Ca Virtual Assurance For Infrastructure Managers	Version 12.9
Ca Workload Automation Ae	Version r11.3.5
Ca Workload Automation Ae	Version r11.3.6
Ca Workload Automation Ae	Version r11.3
Ca Workload Automation Ae	Version r11