Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vhm5-4pmc-4r29

Опубликовано: 31 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.

EPSS

Процентиль: 41%
0.00189
Низкий

7.5 High

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.

EPSS

Процентиль: 41%
0.00189
Низкий

7.5 High

CVSS3

Дефекты

CWE-311