What’s Vulnerable › Vulnerabilities

CVE-2015-3317

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-06-17 · updated 2026-06-17
• Weakness: CWE-119

Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.

Affected products

• Ca Client Automation: r12.5-sp01, r12.8, r12.9
• Ca Network And Systems Management: r11.2
• Ca Nsm Job Management Option: r11.0, r11.1, r11.2
• Ca Universal Job Management Agent: all versions
• Ca Virtual Assurance For Infrastructure Managers: 12.6, 12.7, 12.8, 12.9
• CA Technologies Workload Automation AE: r11, r11.3, r11.3.5, r11.3.6

References

• http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
• http://www.securityfocus.com/bid/75033
• http://www.securitytracker.com/id/1032512
• http://www.securitytracker.com/id/1032513
• http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
• http://www.securityfocus.com/bid/75033
• http://www.securitytracker.com/id/1032512
• http://www.securitytracker.com/id/1032513

Get alerted when CVE-2015-3317 or the next vulnerability affects your stack