Описание
AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the __report parameter of the BIRT viewer servlet.
Ссылки
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:bmc:remedy_ar_system_server:8.0:*:*:*:*:*:*:*
cpe:2.3:a:bmc:remedy_ar_system_server:9.0:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00366
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-269
Связанные уязвимости
github
больше 3 лет назад
AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the __report parameter of the BIRT viewer servlet.
EPSS
Процентиль: 58%
0.00366
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-269