CVE-2011-1654

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-04-18 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.

Affected products

Broadcom Total Defense: r12

References

http://secunia.com/advisories/44097
http://securitytracker.com/id?1025353
http://www.securityfocus.com/archive/1/517488/100/0/threaded
http://www.securityfocus.com/archive/1/517494/100/0/threaded
http://www.securityfocus.com/bid/47357
http://www.vupen.com/english/advisories/2011/0977
http://www.zerodayinitiative.com/advisories/ZDI-11-126/
https://exchange.xforce.ibmcloud.com/vulnerabilities/66726
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D
http://secunia.com/advisories/44097
http://securitytracker.com/id?1025353
http://www.securityfocus.com/archive/1/517488/100/0/threaded

Get alerted when CVE-2011-1654 or the next vulnerability affects your stack