CVE-2022-35864

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of...

CVE-2022-35864

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of...

CVE-2022-35864

This CVE affects BMC Track-It! version 20.21.02.109. The vulnerability is an SQL injection in the GetPopupSubQueryDetails endpoint caused by insufficient validation of a user-supplied string used to build queries, enabling disclosure of stored credentials. Exploitation requires authentication. Pu...