BMC Remedy LFI / RFI / XSS / Code Execution Vulnerabilities

BMC Remedy suffers from log hijacking, code execution, cross site scripting, local/remote file inclusion, and various other vulnerabilities. Document Title ============== Multiple vulnerabilities in BMC Remedy Reported By =========== Simon Rawet from Outpost24 Kristian Varnai from Outpost24 Vendo...

BMC Footprints Service Core Cross-Site Scripting Vulnerability

BMC Footprints Service Core is a suite of IT service and asset automation management platforms from BMC Software, USA. A cross-site scripting vulnerability exists in BMC Footprints Service Core version 11.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...

CVE-2014-9514

Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...

CVE-2014-9514

BMC Footprints Service Core 11.5 is affected by a cross-site scripting (XSS) vulnerability in its web UI. CNVD-2017-30588 states that a remote attacker can exploit this to inject arbitrary web script or HTML. The NVD entry confirms XSS in Footprints Service Core 11.5. No remediation details are p...

CVE-2014-9514

Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...

CVE-2014-9514: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...

CVE-2017-13130

mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring...

Code injection

mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring...

CVE-2017-13130

CVE-2017-13130 affects BMC Patrol (mcmnm) with a local privilege escalation in which a crafted libmcmclnx.so placed in the current working directory can be executed to gain elevated privileges. Root cause: the binary is setuid root and the RPATH starts with .: which enables an attacker-controlled...

BMC Patrol Elevation of Privilege Vulnerability

BMC Patrol is a suite of enterprise-class server management tools. A security vulnerability in BMC Patrol mcmnm allows local attackers to exploit the vulnerability by submitting a special libmcmclnx.so with elevated privileges...

CVE-2017-13130: Uncontrolled Search Path Element

mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring...

CVE-2017-13130

mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring...

BMC Medical Luna CPAP Machine and 3B Medical Luna CPAP Machine Input Validation Vulnerability

BMC Medical Luna CPAP Machine is a ventilator from BMC Medical China.3B Medical Luna CPAP Machine is a ventilator from 3B Medical USA. A denial of service vulnerability exists in BMC Medical Luna CPAP Machine and 3B Medical Luna CPAP Machine. A remote attacker could exploit this vulnerability to...

Authorization

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors...

CVE-2016-5063

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors...

CVE-2016-5063

CVE-2016-5063 affects the Windows RSCD agent in BMC Server Automation prior to 8.6 SP1 Patch 2 and 8.7 prior to Patch 3. The issue allows remote attackers to bypass authorization and invoke RPC calls via unspecified vectors. Public exploit materials exist (e.g., Exploit-DB 43934) showing Windows ...

CVE-2016-5063

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors...

CVE-2016-5063: Improper Authorization

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors...

BMC Remedy with Smart IT - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application BMC Remedy with Smart IT published at the 'play' market has multiple vulnerabilities...