CVE-2019-19216

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...

CVE-2019-19217

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...

CVE-2019-19218

CVE-2019-19218 affects BMC Control-M/Agent 7.0.00.000. Multiple connected sources describe an information disclosure due to insecure password storage in the Control-M/Agent. The CVE details indicate a high-severity exposure (CVSSv3.1 base score 7.5) with network access required and no privileges ...

Insecure Temporary Files in BMC/Control-M Agent

BMC's Control M is an enterprise scheduling facility. Unfortunately, the agent software suffers from a problem with insecure temporary file creation. We noticed the problem on Solaris systems running the version 6.1.03 with current patches; it is reasonable to assume that other OS platforms and...