CVE-2015-1497

CVE-2015-1497 affects Persistent Systems Radia Client Automation (RCA) and its radexecd.exe component. A remote, unauthenticated attacker can send a crafted request to TCP port 3465/TCP to execute arbitrary commands with the privileges of the radexecd process. Affected RCA versions include 7.9, 8...

CVE-2015-1498

The CVE-2015-1498 issue affects Persistent Systems Radia Client Automation. Connected sources confirm a improper access-control vulnerability in specific requests (notably getUsers, addAssigneesToRole, removeAssigneesFromRole) that enables remote attackers to enumerate user accounts and modify us...