Описание
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the __imageid parameter.
Ссылки
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:bmc:remedy_ar_system_server:8.0:*:*:*:*:*:*:*
cpe:2.3:a:bmc:remedy_ar_system_server:9.0:*:*:*:*:*:*:*
EPSS
Процентиль: 40%
0.00186
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-269
Связанные уязвимости
github
больше 3 лет назад
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the __imageid parameter.
EPSS
Процентиль: 40%
0.00186
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-269