CVE-2011-1654
Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.4%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 11.42% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- broadcom/total defense
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/44097Vendor Advisory
- http://securitytracker.com/id?1025353
- http://www.securityfocus.com/archive/1/517488/100/0/threaded
- http://www.securityfocus.com/archive/1/517494/100/0/threaded
- http://www.securityfocus.com/bid/47357
- http://www.vupen.com/english/advisories/2011/0977Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-126/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66726
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D
- http://secunia.com/advisories/44097Vendor Advisory
- http://securitytracker.com/id?1025353
- http://www.securityfocus.com/archive/1/517488/100/0/threaded
- http://www.securityfocus.com/archive/1/517494/100/0/threaded
- http://www.securityfocus.com/bid/47357
- http://www.vupen.com/english/advisories/2011/0977Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-126/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66726
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.