2 matches found
CVE-2022-24047
This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...
5.3CVSS9.8AI score0.01895EPSS
SaveExploits0References2
CVE-2022-24047
CVE-2022-24047 affects BMC Track-It! 20.21.01.102 where an HTTP authorization flaw permits remote authentication bypass without credentials. Root cause: lack of authentication prior to accessing functionality, enabling an unauthenticated attacker to bypass login. Multiple sources (including ZDI-2...
9.8CVSS9.6AI score0.01895EPSS
SaveExploits0References2Affected Software1
20