CVE-2016-9795: The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and

A vulnerability in the casrvc program (a service component used by multiple CA software products) allows local users (people with access to the same computer) to modify any file on the system and gain root privileges (full administrative control) because the program doesn't properly validate input or check permissions. This affects multiple versions of CA software across several operating systems including Linux, AIX, HP-UX, and Solaris.