CVE-2015-4664
CVE-2015-4664
Vexday Risk Score
28Low
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS —EPSS 20.8%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
27 Jul 2015Public PoC
18 Jun 2018Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.
Affected products
CA Technologies · CA Privileged Access Managerpublic PoCs found — 3
cve_referencepacketstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.htmlunverifiedcve_referencewww.exploit-db.com/exploits/37708/unverifiedexploitdbwww.exploit-db.com/exploits/37708unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://packetstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.htmlhttps://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.htmlhttps://www.exploit-db.com/exploits/37708/http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt