vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2015-3318

N/A
Published: June 17, 2015 at 10:00 AM UTC
Updated: June 17, 2026 at 12:25 AM UTC
6 products affected across 1 vendorWorkload Automation AEClient AutomationVirtual Assurance for Infrastructure Managers· also runs on 4 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.4%

Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Client Automation· Ca
95%
r12.5 sp01r12.8r12.9
hp-hp-ux (environment) · ibm-aix (environment) · linux-linux-kernel (environment) · oracle-solaris (environment)
Network and Systems Management· Ca
95%
r11.2
hp-hp-ux (environment) · ibm-aix (environment) · linux-linux-kernel (environment) · oracle-solaris (environment)
Nsm Job Management Option· Ca
95%
r11.0r11.1r11.2
hp-hp-ux (environment) · ibm-aix (environment) · linux-linux-kernel (environment) · oracle-solaris (environment)
Universal Job Management Agent· Ca
95%
All versions
hp-hp-ux (environment) · ibm-aix (environment) · linux-linux-kernel (environment) · oracle-solaris (environment)
Virtual Assurance for Infrastructure Managers· Ca
95%
12.612.712.812.9
hp-hp-ux (environment) · ibm-aix (environment) · linux-linux-kernel (environment) · oracle-solaris (environment)
Workload Automation AE· Ca
95%
r11.0r11.3r11.3.5r11.3.6
hp-hp-ux (environment) · ibm-aix (environment) · linux-linux-kernel (environment) · oracle-solaris (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (4)

x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/75033
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://www.securitytracker.com/id/1032512
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://www.securitytracker.com/id/1032513

CVSS

4.6MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card