Design/Logic Flaw

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service ConfigurationService on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the...

CVE-2016-6599

CVE-2016-6599 affects BMC Track-It! 11.4 prior to Hotfix 3. An unauthenticated .NET remoting service exposed on port 9010 (ConfigurationService) can disclose a configuration file containing the app database name and credentials, including domain admin credentials, encrypted with a fixed DES key/I...