Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-4872
HistoryOct 10, 2014 - 10:55 a.m.

Design/Logic Flaw

2014-10-1010:55:00
PRIOn knowledge base
www.prio-n.com
1

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.959 High

EPSS

Percentile

99.4%

JSON

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.

CPENameOperatorVersion
track-it\\!eq11.3.0.355

Related

cve 1
zdt 2
cvelist 1
packetstorm 3
exploitpack 2
securityvulns 2
seebug 1
openvas 1
cert 1
exploitdb 2
cve
cve
CVE-2014-4872
2014-10-10 10:55:00
zdt
zdt
BMC Track-It! - Multiple Vulnerabilities
2014-10-09 00:00:00
Numara / BMC Track-It! FileStorageService Arbitrary File Upload Exploit
2014-10-21 00:00:00
cvelist
cvelist
CVE-2014-4872
2014-10-10 10:00:00
packetstorm
packetstorm
Numara / BMC Track-It! FileStorageService Arbitrary File Upload
2014-10-21 00:00:00
BMC Track-it! Remote Code Execution / SQL Injection
2014-10-08 00:00:00
BMC Track-It! 11.4 Code Execution / Information Disclosure
2018-01-26 00:00:00
exploitpack
exploitpack
BMC Track-It! - Multiple Vulnerabilities
2014-10-09 00:00:00
BMC Track-It! 11.4 - Multiple Vulnerabilities
2015-09-28 00:00:00
securityvulns
securityvulns
BMC Track-It multiple security vulnerabilities
2014-10-14 00:00:00
[CERT VU#121036 / Multiple CVEs] RCE, domain admin creds leakage and more in BMC Track-It!
2014-10-14 00:00:00
seebug
seebug
BMC Track-It! - Multiple Vulnerabilities
2014-10-10 00:00:00
openvas
openvas
BMC Track-It! <= 11.3.0.355 Multiple Vulnerabilities
2014-11-20 00:00:00
cert
cert
BMC Track-It! contains multiple vulnerabilities
2014-10-07 00:00:00
exploitdb
exploitdb
BMC Track-It! 11.4 - Multiple Vulnerabilities
2015-09-28 00:00:00
BMC Track-It! - Multiple Vulnerabilities
2014-10-09 00:00:00

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.959 High

EPSS

Percentile

99.4%

JSON
Related for PRION:CVE-2014-4872
cve1zdt2cvelist1packetstorm3exploitpack2securityvulns2seebug1openvas1cert1exploitdb2