Lucene search
HistoryOct 10, 2014 - 10:55 a.m.
CVE-2014-4872
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.957
Percentile
99.5%
BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.
Affected configurations
Node
bmctrack-it\!Match11.3.0.355
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bmc | track-it\! | 11.3.0.355 | cpe:2.3:a:bmc:track-it\!:11.3.0.355:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2014-4872
2014-10-10 10:55:07
zdt
zdt
Numara / BMC Track-It! FileStorageService Arbitrary File Upload Exploit
2014-10-21 00:00:00
BMC Track-It! - Multiple Vulnerabilities
2014-10-09 00:00:00
packetstorm
packetstorm
Numara / BMC Track-It! FileStorageService Arbitrary File Upload
2014-10-21 00:00:00
BMC / Numara Track-It! Domain Administrator and SQL Server User Password Disclosure
2024-08-31 00:00:00
BMC Track-It! 11.4 Code Execution / Information Disclosure
2018-01-26 00:00:00
metasploit
metasploit
Numara / BMC Track-It! FileStorageService Arbitrary File Upload
2014-10-07 22:50:10
exploitdb
exploitdb
BMC Track-It! - Multiple Vulnerabilities
2014-10-09 00:00:00
BMC Track-It! 11.4 - Multiple Vulnerabilities
2015-09-28 00:00:00
prion
prion
Design/Logic Flaw
2014-10-10 10:55:00
seebug
seebug
Numara / BMC Track-It! FileStorageService Arbitrary File Upload
2014-11-13 00:00:00
BMC Track-It! - Multiple Vulnerabilities
2014-10-10 00:00:00
cvelist
cvelist
CVE-2014-4872
2014-10-10 10:00:00
exploitpack
exploitpack
BMC Track-It! 11.4 - Multiple Vulnerabilities
2015-09-28 00:00:00
BMC Track-It! - Multiple Vulnerabilities
2014-10-09 00:00:00
securityvulns
securityvulns
BMC Track-It multiple security vulnerabilities
2014-10-14 00:00:00
openvas
openvas
BMC Track-It! <= 11.3.0.355 Multiple Vulnerabilities
2014-11-20 00:00:00
cert
cert
BMC Track-It! contains multiple vulnerabilities
2014-10-07 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.957
Percentile
99.5%
Related for NVD:CVE-2014-4872