CVE-2018-8954
CRITICALCA Workload Control Center < r11.4 SP6 - Remote Code Execution via Crafted HTTP Request
Title source: llmDescription
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1040605
Vendor Advisory x_refsource_confirm
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180329-01--security-notice-for-ca-workload-automation-ae.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/103742
Scores
CVSS v3
9.8
EPSS
0.0731
EPSS Percentile
93.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (6)
ca/workload_control_center
sp1
ca/workload_control_center
sp2
ca/workload_control_center
sp3
ca/workload_control_center
sp4
ca/workload_control_center
sp5
ca/workload_control_center
< r11.4
Published
Apr 11, 2018
Tracked Since
Feb 18, 2026