PT-2016-3955 · Ca · Ca Release Automation

Publicado 2016-06-29 · Atualizado 2021-04-12 · CVE-2015-8699

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CA Release Automation versions 5.0.2 through 5.0.2-227 CA Release Automation versions 5.5.1 through 5.5.1-1616 CA Release Automation versions 5.5.2 through 5.5.2-434 CA Release Automation versions 6.1.0 through 6.1.0-1026

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting (XSS) attacks.

Recommendations For versions 5.0.2 through 5.0.2-227, update to version 5.0.2-227 or later. For versions 5.5.1 through 5.5.1-1616, update to version 5.5.1-1616 or later. For versions 5.5.2 through 5.5.2-434, update to version 5.5.2-434 or later. For versions 6.1.0 through 6.1.0-1026, update to version 6.1.0-1026 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-8699

Produtos afetados

Ca Release Automation

Referências · 4

• http://securityfocus.com/bid/91497 · Nota
• http://securitytracker.com/id/1036193 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8699 · Nota de Segurança
• http://ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160627-01-security-notice-for-release-automation.aspx · Aviso do Fabricante