CVE-2024-1604mediumCWE-639

CVE-2024-1604: falha de média gravidade em BMC Control-M

Incorrect authorization in BMC Control-M

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Control-M

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.4epss 0.5%
Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to read and make unauthorized changes to any reports available within the application, even without proper permissions. The attacker must know the unique identifier of the report they want to manipulate. Fix for 9.0.20 branch was released in version 9.0.20.238. Fix for 9.0.21 branch was released in version 9.0.21.201.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Produtos afetados
BMC · Control-M
CVEs relacionadas — BMC Control-M

No mesmo produto, das mais perigosas para as menos.

CVE-2024-1606MEDIUMHTML injection in BMC Control-MEPSS 0.4%CVE-2024-1605MEDIUMDLL side-loading in BMC Control-MEPSS 0.2%