263 matches found
CVE-2019-19218
BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...
CVE-2019-19218
CVE-2019-19218 affects BMC Control-M/Agent 7.0.00.000. Multiple connected sources describe an information disclosure due to insecure password storage in the Control-M/Agent. The CVE details indicate a high-severity exposure (CVSSv3.1 base score 7.5) with network access required and no privileges ...
CVE-2019-19219
CVE-2019-19219 affects BMC Control-M/Agent 7.0.00.000. The CNVD entry describes a vulnerability in Control-M/Agent–Control-M/Server communication over TCP that lets remote attackers submit a special request to download arbitrary files. The NVD entry similarly states Arbitrary File Download. No re...
CVE-2019-19219
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...
CVE-2019-19220
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...
PT-2020-10096
Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description The issue is related to an insecure file copy in the software. Recommendations For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this...
PT-2020-10098
Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description The issue is related to insecure password storage. Recommendations For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerabili...
PT-2020-10100
Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description The issue allows OS Command Injection. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
PT-2020-10095
Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description A buffer overflow issue exists when the On-Do action destination is set to Mail and the Control-M/Agent is configured to send emails. This allows remote attackers to have an unspecified impact...
CVE-2019-19216: Improper Privilege Management
BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...
PT-2020-10097
Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description The issue allows OS Command Injection. There is no information about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. Recommendation...
CVE-2019-19217: Improper Neutralization of Special Elements used in an OS Command
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...
CVE-2019-19218: Insufficiently Protected Credentials
BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...
CVE-2019-19215: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...
CVE-2019-19220: Improper Neutralization of Special Elements used in an OS Command
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...
PT-2020-10099
Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description The issue allows for arbitrary file download. Recommendations For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2019-19219: Undefined Security Weakness
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...
CVE-2005-3311
BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-3311
BMC Software Control-M 6.1.03 for Solaris (and possibly other platforms) is affected by a local symlink race that allows a local user to overwrite arbitrary files via temporary files. This vulnerability can impact integrity (partial) with no confidentiality/availability impact per the CVSS vector...