CVE-2015-4664: vulnerability in CA Privileged Access Manager
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 20%
from disclosure to weaponsame day
Published on NVDJun 18
1st PoCJul 27
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.
Affected products
CA Technologies · CA Privileged Access Managerpublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/37708unverifiedcve_referencewww.exploit-db.com/exploits/37708/unverifiedcve_referencepacketstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — CA Privileged Access Manager
In the same product, most dangerous first.
References
http://packetstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.htmlhttps://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.htmlhttps://www.exploit-db.com/exploits/37708/http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt