PT-2015-5919 · Ca · Ca Spectrum

Published 2015-04-08 · Updated 2021-04-12 · CVE-2015-2828

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Spectrum versions 9.2.x through 9.3.x before 9.3 H02

Description The issue arises from improper validation of serialized Java objects, allowing remote authenticated users to gain administrative privileges by crafting malicious object data.

Recommendations For CA Spectrum versions 9.2.x through 9.3.x before 9.3 H02, update to version 9.3 H02 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-2828

Affected Products

Ca Spectrum

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2828 · Security Note
• http://ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150407-01-security-notice-for-ca-spectrum.aspx · Vendor Advisory
• http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html · Note
• http://securityfocus.com/bid/73957 · Note
• http://securityfocus.com/archive/1/535205/100/0/threaded · Note