Lucene search

CaCVELIST:CVE-2015-4664

HistoryJun 18, 2018 - 6:00 p.m.

CVE-2015-4664

2018-06-1818:00:00

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.01

Percentile

83.8%

JSON

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.

CNA Affected

[
  {
    "product": "CA Privileged Access Manager",
    "vendor": "CA Technologies",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.4.4 and earlier"
      }
    ]
  }
]

References

packetstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.html

www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt

support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html

www.exploit-db.com/exploits/37708/