Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frq5-wqm4-xjr8

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.

EPSS

Процентиль: 99%
0.82177
Высокий

Дефекты

CWE-287
CWE-306

Связанные уязвимости

nvd
больше 11 лет назад

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.

EPSS

Процентиль: 99%
0.82177
Высокий

Дефекты

CWE-287
CWE-306