EUVD-2015-5087

Malware in sbrugna...

Code injection

AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the report parameter of the BIRT viewer servlet...

Code injection

The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...

PT-2020-7853

Name of the Vulnerable Software and Affected Versions: BMC Remedy AR System Server versions prior to 9.0 SP1 Description: The issue allows remote authenticated users to access arbitrary local files. This is achieved by manipulating the imageid parameter in the BIRT Engine servlet, part of the AR...

PT-2020-7852

Name of the Vulnerable Software and Affected Versions: BMC Remedy AR System Server versions prior to 9.0 SP1 Description: The issue allows remote authenticated users to access arbitrary files by manipulating the report parameter of the BIRT viewer servlet in the AR System Mid Tier component...

CVE-2015-5072: Improper Privilege Management

The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...

CVE-2018-19505

Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution involving a...

CVE-2018-19505

Remedy AR System Server in BMC Remedy 7.1 is affected by an impersonation flaw in WOI:WorkOrderConsole’s userdata.js. The root cause is a username substitution via UserData_Init, allowing a user to assume another user’s identity in certain scenarios. Impact is user impersonation with elevated ris...

PT-2019-9839

Name of the Vulnerable Software and Affected Versions BMC Remedy versions 7.1 Description The issue arises from the Remedy AR System Server in BMC Remedy, where it may fail to set the correct user context in certain impersonation scenarios. This can allow a user to act with the identity of a...

BMC Remedy 7.1 User Impersonation

...

Default credentials

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...

CVE-2016-2349: Weak Password Recovery Mechanism for Forgotten Password

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...

PT-2016-5126

Name of the Vulnerable Software and Affected Versions BMC Remedy AR System Server versions 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 Description The issue allows attackers to reset arbitrary passwords by providing a blank previous password. Recommendations For versions 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1,...