CVE-2015-8698: High severity broadcom release automation vulnerability
CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8698?
CVE-2015-8698 has a high severity level due to its potential for remote file disclosure and denial of service.
How do I fix CVE-2015-8698?
To fix CVE-2015-8698, update your CA Release Automation to a version that includes the patch for this vulnerability.
What versions of CA Release Automation are affected by CVE-2015-8698?
CVE-2015-8698 affects CA Release Automation versions prior to 5.0.2-227, 5.5.1-1616, 5.5.2-434, and 6.1.0-1026.
Can CVE-2015-8698 be exploited remotely?
Yes, CVE-2015-8698 can be exploited remotely by attackers to read arbitrary files or cause denial of service.
What kind of attacks can CVE-2015-8698 facilitate?
CVE-2015-8698 can facilitate attacks such as XML external entity attacks leading to file disclosure or service disruptions.