Vulnerability Details CVE-2015-2828
CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.4%
CVSS Severity
CVSS v2 Score 9.0
References
- http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150407-01-security-notice-for-ca-spectrum.aspx
- http://www.securityfocus.com/archive/1/535205/100/0/threaded
- http://www.securityfocus.com/bid/73957
- http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150407-01-security-notice-for-ca-spectrum.aspx
- http://www.securityfocus.com/archive/1/535205/100/0/threaded
- http://www.securityfocus.com/bid/73957