CVE-2015-2828
broadcom spectrum: no CVSS score yet. EPSS 3.2% chance of exploitation in the next 30 days.
CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- broadcom:spectrum
References
- http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150407-01-security-notice-for-ca-spectrum.aspx
- http://www.securityfocus.com/archive/1/535205/100/0/threaded
- http://www.securityfocus.com/bid/73957
- http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html