Lucene search
HistoryDec 12, 2014 - 11:59 a.m.
CVE-2014-8270
cve-2014-8270
bmc track-it!
privilege escalation
arbitrary code execution
password reset
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
8 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.2%
BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset.
Affected configurations
Node
bmctrack-it\!Match11.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| bmc:track-it\! | bmc track-it! | eq | 11.3 |
Related
cvelist
cvelist
CVE-2014-8270
2014-12-12 11:00:00
nvd
nvd
CVE-2014-8270
2014-12-12 11:59:05
zdi
zdi
BMC Track-It! Web Account Credential Information Disclosure Vulnerability
2014-12-09 00:00:00
prion
prion
Design/Logic Flaw
2014-12-12 11:59:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
8 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.2%
Related for CVE-2014-8270