Vulnerability Details : CVE-2015-3316
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.
Products affected by CVE-2015-3316
- cpe:2.3:a:ca:network_and_systems_management:r11.2:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:client_automation:r12.5:sp01:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:client_automation:r12.8:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:client_automation:r12.9:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:nsm_job_management_option:r11.2:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:nsm_job_management_option:r11.0:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:nsm_job_management_option:r11.1:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:universal_job_management_agent:-:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.9:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.6:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.7:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:virtual_assurance_for_infrastructure_managers:12.8:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:workload_automation_ae:r11.3.6:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:workload_automation_ae:r11:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:workload_automation_ae:r11.3.5:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ca:workload_automation_ae:r11.3:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:broadcom:network_and_systems_management:r11.1:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
Exploit prediction scoring system (EPSS) score for CVE-2015-3316
0.17%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 36 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-3316
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
References for CVE-2015-3316
-
http://www.securitytracker.com/id/1032512
CA Common Services Multiple Flaws Let Local Users Gain Elevated Privileges - SecurityTracker
-
http://www.securityfocus.com/bid/75033
CA Common Services Multiple Local Privilege Escalation And Buffer Overflow Vulnerabilities
-
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
CA20150604-01: Security Notice for CA Common Services - CA TechnologiesVendor Advisory
-
http://www.securitytracker.com/id/1032513
CA Network and Systems Management Multiple Flaws Let Local Users Gain Elevated Privileges - SecurityTracker
Jump to