Multiple vulnerabilities in CA Spectrum

Описание

Multiple serious vulnerabilities have been found in CA Spectrum. Malicious users can exploit these vulnerabilities to gain privileges or inject arbitrary code.

Below is a complete list of vulnerabilities

1. Improper data serialization can be exploited remotely via a specially designed Java object;
2. XSS vulnerability can be exploited remotely via an unknown vectors.

Первичный источник обнаружения

• CA security notice
  

Связанные продукты

• CA-Spectrum

Список CVE

• CVE-2015-2828
  critical
• CVE-2015-2827
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com