CVE-2023-34258

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution...

CVE-2023-34257: Undefined Security Weakness

An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified and, by default, authentication is not required. Some configuration fields related to SNMP e.g., masterAgentName or masterAgentStartLine result in code execution when the agent is restarted...

CVE-2023-34258: Missing Encryption of Sensitive Data

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution...

CVE-2023-34258

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution...

PT-2023-24779 · Bmc · Bmc Patrol

Name of the Vulnerable Software and Affected Versions: BMC Patrol versions through 23.1.00 Description: An issue was discovered where the agent's configuration can be remotely modified, and by default, authentication is not required. Some configuration fields related to SNMP, such as...

CVE-2023-34257

CVE-2023-34257 affects IBM BMC Patrol up to version 23.1.00. The agent’s configuration can be remotely modified, and by default authentication is not required. SNMP-related fields (e.g., masterAgentName, masterAgentStartLine) can trigger code execution when the agent restarts. Vendor note: authen...

CVE-2023-34257

An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified and, by default, authentication is not required. Some configuration fields related to SNMP e.g., masterAgentName or masterAgentStartLine result in code execution when the agent is restarted...

CVE-2023-34258

Summary of CVE-2023-34258 (BMC Patrol) : In BMC Patrol versions prior to 22.1.00, the agent’s configuration can be queried remotely. This configuration contains the Patrol account password encrypted with a default AES key, enabling an attacker to perform remote code execution. Reported impact sco...

CVE-2021-31791

In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command...

CVE-2021-31791

In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command...

Command injection

In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command...

CVE-2021-31791

In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command...

CVE-2021-31791

The CVE-2021-31791 issue affects Hardware Sentry KM prior to version 10.0.01 for BMC PATROL. The vulnerability stems from a failure/timeout during a command that could lead to disclosure of a plaintext password. The available connected documents confirm the affected product/version and the inform...

CVE-2021-31791: Cleartext Storage of Sensitive Information

In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command...

PT-2021-19508

Name of the Vulnerable Software and Affected Versions Hardware Sentry KM versions prior to 10.0.01 for BMC PATROL Description A cleartext password may be discovered after a failure or timeout of a command. Recommendations For versions prior to 10.0.01, update to version 10.0.01 or later to resolv...

BMC Software Patrol Agent Elevation of Privilege Vulnerability

BMC Software Patrol Agent is a system, application and event management tool from BMC Software, USA. The product is primarily used for monitoring and managing distributed environments. An elevation of privilege vulnerability exists in BMC Software Patrol Agent 9.0.10i, which is caused by weak...

BMC Software Patrol Agent Elevation of Privilege Vulnerability (CNVD-2020-13680)

BMC Software Patrol Agent is a system, application and event management tool from BMC Software, USA. The product is primarily used for monitoring and managing distributed environments. An elevation of privilege vulnerability exists in BMC Patrol Agent version 9.0.10i, which is caused by a weak...

CVE-2019-17044

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially crafting a shared library .so file that will be loaded during...

CVE-2019-17043

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution...

CVE-2019-17044

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially crafting a shared library .so file that will be loaded during...