Multiple vulnerabilities in CA Spectrum

Description

Multiple serious vulnerabilities have been found in CA Spectrum. Malicious users can exploit these vulnerabilities to gain privileges or inject arbitrary code.

Below is a complete list of vulnerabilities

1. Improper data serialization can be exploited remotely via a specially designed Java object;
2. XSS vulnerability can be exploited remotely via an unknown vectors.

Original advisories

• CA security notice

Related products

• CA-Spectrum

CVE list

• CVE-2015-2828
  critical
• CVE-2015-2827
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com