PT-2015-5919
CVE-2015-2828
·
Published
2015-04-08
·
Updated
2021-04-12
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
CA Spectrum versions 9.2.x through 9.3.x before 9.3 H02
Description
The issue arises from improper validation of serialized Java objects, allowing remote authenticated users to gain administrative privileges by crafting malicious object data.
Recommendations
For CA Spectrum versions 9.2.x through 9.3.x before 9.3 H02, update to version 9.3 H02 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾