PT-2016-3955 · Ca · Ca Release Automation

Published 2016-06-29 · Updated 2021-04-12 · CVE-2015-8699

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CA Release Automation versions 5.0.2 through 5.0.2-227 CA Release Automation versions 5.5.1 through 5.5.1-1616 CA Release Automation versions 5.5.2 through 5.5.2-434 CA Release Automation versions 6.1.0 through 6.1.0-1026

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting (XSS) attacks.

Recommendations For versions 5.0.2 through 5.0.2-227, update to version 5.0.2-227 or later. For versions 5.5.1 through 5.5.1-1616, update to version 5.5.1-1616 or later. For versions 5.5.2 through 5.5.2-434, update to version 5.5.2-434 or later. For versions 6.1.0 through 6.1.0-1026, update to version 6.1.0-1026 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-8699

Affected Products

Ca Release Automation

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-8699 · Security Note
• http://ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160627-01-security-notice-for-release-automation.aspx · Vendor Advisory
• http://securityfocus.com/bid/91497 · Note
• http://securitytracker.com/id/1036193 · Note