Vulnerability in Broadcom Network And Systems Management
CVE-2015-3316
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.
EPSS: 0.005 (38.6th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Network_and_systems_management — versions r11.1
- Ca Client_automation — versions r12.5, r12.8, r12.9
- Ca Network_and_systems_management — versions r11.2
- Ca Nsm_job_management_option — versions r11.0, r11.1, r11.2
- Ca Universal_job_management_agent
- Ca Virtual_assurance_for_infrastructure_managers — versions 12.6, 12.7, 12.8
- Ca Workload_automation_ae — versions r11, r11.3, r11.3.5
- Hp Hp-ux
- Ibm Aix
- Linux Linux_kernel
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2015-3316?
- CVE-2015-3316 is a vulnerability in Broadcom Network And Systems Management. Published 2015-06-17.
- Is CVE-2015-3316 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.