Lucene search
PRIOn knowledge basePRION:CVE-2018-19505HistoryJan 03, 2019 - 7:29 p.m.
Code injection
2019-01-0319:29:00
PRIOn knowledge base
www.prio-n.com
3
Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution involving a UserData_Init call.
| CPE | Name | Operator | Version |
|---|---|---|---|
| remedy_action_request_system_server | eq | 7.1 |
Related
checkpoint_advisories
checkpoint_advisories
BMC Remedy Privilege Escalation (CVE-2018-19505)
2018-12-06 00:00:00
cvelist
cvelist
CVE-2018-19505
2019-01-03 19:00:00
cve
cve
CVE-2018-19505
2019-01-03 19:29:00
nvd
nvd
CVE-2018-19505
2019-01-03 19:29:00
zdt
zdt
BMC Remedy 7.1 User Impersonation Vulnerability
2018-11-28 00:00:00
packetstorm
packetstorm
BMC Remedy 7.1 User Impersonation
2018-11-28 00:00:00