PatchTheCVECVE-2016-9795: The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE
39
Routine
HIGH 7.8DOWNGRADEDOWNGRADEDOWNGRADE
CVE-2016-9795 is a high-severity flaw (CVSS 7.8) affecting ca workload automation ae, client automation, systemedge. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA Workload Automation AE 11, 11.3, 11.3.5, and 11.3.6 on AIX, HP-UX, Linux, and Solaris allows local users to modify arbitrary files and consequently gain
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 55%) |
| CISA exploited list | No |
| Weakness | CWE-20 |
| Published | 2017-01-27 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
broadcom ca workload automation ae DOWNGRADE
Affected: 11.0 · 11.3 · 11.3.5 · 11.3.6
Fixed in: no fixed release known
Safe to downgrade to: a release before 11.0
1. Check installed version
apt-cache policy ca-workload-automation-ae || rpm -q ca-workload-automation-ae || ca-workload-automation-ae --version
2. No fixed release: DOWNGRADE to a release before 11.0 (Debian / Ubuntu)
apt-cache madison ca-workload-automation-ae
sudo apt install ca-workload-automation-ae=<VERSION_BEFORE_11.0>
sudo apt-mark hold ca-workload-automation-ae
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list ca-workload-automation-ae
sudo dnf downgrade ca-workload-automation-ae-<VERSION_BEFORE_11.0>
sudo dnf versionlock add ca-workload-automation-ae
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
broadcom client automation DOWNGRADE
Affected: 12.8 · 12.9 · 14.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 12.8
1. Check installed version
apt-cache policy client-automation || rpm -q client-automation || client-automation --version
2. No fixed release: DOWNGRADE to a release before 12.8 (Debian / Ubuntu)
apt-cache madison client-automation
sudo apt install client-automation=<VERSION_BEFORE_12.8>
sudo apt-mark hold client-automation
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list client-automation
sudo dnf downgrade client-automation-<VERSION_BEFORE_12.8>
sudo dnf versionlock add client-automation
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
broadcom systemedge DOWNGRADE
Affected: 5.8.2 · 5.9
Fixed in: no fixed release known
Safe to downgrade to: a release before 5.8.2
1. Check installed version
apt-cache policy systemedge || rpm -q systemedge || systemedge --version
2. No fixed release: DOWNGRADE to a release before 5.8.2 (Debian / Ubuntu)
apt-cache madison systemedge
sudo apt install systemedge=<VERSION_BEFORE_5.8.2>
sudo apt-mark hold systemedge
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list systemedge
sudo dnf downgrade systemedge-<VERSION_BEFORE_5.8.2>
sudo dnf versionlock add systemedge
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
broadcom systems performance for infrastructure managers DOWNGRADE
Affected: 12.8 · 12.9
Fixed in: no fixed release known
Safe to downgrade to: a release before 12.8
1. Check installed version
apt-cache policy systems-performance-for-infrastructure-managers || rpm -q systems-performance-for-infrastructure-managers || systems-performance-for-infrastructure-managers --version
2. No fixed release: DOWNGRADE to a release before 12.8 (Debian / Ubuntu)
apt-cache madison systems-performance-for-infrastructure-managers
sudo apt install systems-performance-for-infrastructure-managers=<VERSION_BEFORE_12.8>
sudo apt-mark hold systems-performance-for-infrastructure-managers
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list systems-performance-for-infrastructure-managers
sudo dnf downgrade systems-performance-for-infrastructure-managers-<VERSION_BEFORE_12.8>
sudo dnf versionlock add systems-performance-for-infrastructure-managers
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
ca universal job management agent DOWNGRADE
Affected: 11.2
Fixed in: no fixed release known
Safe to downgrade to: a release before 11.2
1. Check installed version
apt-cache policy universal-job-management-agent || rpm -q universal-job-management-agent || universal-job-management-agent --version
2. No fixed release: DOWNGRADE to a release before 11.2 (Debian / Ubuntu)
apt-cache madison universal-job-management-agent
sudo apt install universal-job-management-agent=<VERSION_BEFORE_11.2>
sudo apt-mark hold universal-job-management-agent
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list universal-job-management-agent
sudo dnf downgrade universal-job-management-agent-<VERSION_BEFORE_11.2>
sudo dnf versionlock add universal-job-management-agent
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
ca virtual assurance for infrastructure managers DOWNGRADE
Affected: 12.8 · 12.9
Fixed in: no fixed release known
Safe to downgrade to: a release before 12.8
1. Check installed version
apt-cache policy virtual-assurance-for-infrastructure-managers || rpm -q virtual-assurance-for-infrastructure-managers || virtual-assurance-for-infrastructure-managers --version
2. No fixed release: DOWNGRADE to a release before 12.8 (Debian / Ubuntu)
apt-cache madison virtual-assurance-for-infrastructure-managers
sudo apt install virtual-assurance-for-infrastructure-managers=<VERSION_BEFORE_12.8>
sudo apt-mark hold virtual-assurance-for-infrastructure-managers
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list virtual-assurance-for-infrastructure-managers
sudo dnf downgrade virtual-assurance-for-infrastructure-managers-<VERSION_BEFORE_12.8>
sudo dnf versionlock add virtual-assurance-for-infrastructure-managers
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2016-9795?
ca workload automation ae: downgrade or apply the listed mitigation; client automation: downgrade or apply the listed mitigation; systemedge: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2016-9795 being exploited?
CVE-2016-9795 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2016-9795 affect?
CVE-2016-9795 affects ca workload automation ae, client automation, systemedge. Severity is high (CVSS 7.8). The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtua
How urgent is CVE-2016-9795?
Priority 39/100. High severity
Related CVEs
- CVE-2019-13656 CRITICAL 9.8 DOWNGRADE DOWNGRADE An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automat