CVE-2015-1498: Persistent Systems Radia Client Automation

High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers request, (2) assign a role to a user account via an addAssigneesToRole request, (3) remove a role from a user account via a removeAssigneesFromRole request, or (4) have other unspecified impact.

Affected products

• Persistent Systems Radia Client Automation: affected versions not specified

Published 2015-02-16. Last modified 2026-06-17.