Improper input validation in Ca Client_automation
CVE-2015-3318
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtua…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (18.7th percentile) — read the EPSS interpretation.
Affected products
- Ca Client_automation — versions r12.5, r12.8, r12.9
- Ca Network_and_systems_management — versions r11.2
- Ca Nsm_job_management_option — versions r11.0, r11.1, r11.2
- Ca Universal_job_management_agent
- Ca Virtual_assurance_for_infrastructure_managers — versions 12.6, 12.7, 12.8
- Ca Workload_automation_ae — versions r11.0, r11.3, r11.3.5
- Hp Hp-ux
- Ibm Aix
- Linux Linux_kernel
- Oracle Solaris
Weakness classification (CWE)
Public proof-of-concept exploits
References
- 1032513 (vdb-entry, x_refsource_SECTRACK)
- 75033 (vdb-entry, x_refsource_BID)
- 1032512 (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2015-3318?
- CVE-2015-3318 is a vulnerability in Ca Client_automation, classified under Improper Input Validation. Published 2015-06-17.
- Is CVE-2015-3318 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.