KLA10537 Multiple vulnerabilities in CA Spectrum

Multiple serious vulnerabilities have been found in CA Spectrum. Malicious users can exploit these vulnerabilities to gain privileges or inject arbitrary code.

Below is a complete list of vulnerabilities

1. Improper data serialization can be exploited remotely via a specially designed Java object;
2. XSS vulnerability can be exploited remotely via an unknown vectors.

Original advisories

CA security notice

Related products

CA-Spectrum

CVE list

CVE-2015-2828 critical

CVE-2015-2827 warning

Solution

Update to the latest version

Get Support

Impacts

• CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• CA Spectrum 9.2 all versionsCA Spectrum 9.3 versions earlier than 9.3 H02