CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Input Validation
Summary: the casrvc program in ca common services, as used in ca client automation 12.8, 12.9, and 14.0; ca systemedge 5.8.2 and 5.9; ca systems performance for infrastructure managers 12.8 and 12.9; ca universal job management agent 11.2; ca virtual assurance for infrastructure managers 12.8 and 12.9; ca workload automation ae 11, 11.3, 11.3.5, and 11.3.6 on aix, hp-ux, linux, and solaris allows local users to modify arbitrary files and consequently gain root privileges via vectors related to insufficient validation.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-01-27
Last Modified Date: 2018-10-09