CVE-2014-4874

BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment page...

PT-2014-6184 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3.0.355 Description: The issue allows remote authenticated users to read arbitrary files by visiting the "TrackItWeb/Attachment" page. Recommendations: For version 11.3.0.355, consider restricting access to the...