CVE-2016-2349

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...

CVE-2016-2349

The CVE concerns the BMC Remedy AR System Server. Affected product: Remedy AR System Server on BMC Remedy versions 8.1 SP2, 9.0, 9.0 SP1, and 9.1. Vulnerability: attackers can reset arbitrary passwords via a blank previous password. Root cause details are not provided in the supplied documents. I...