CVE-2020-35593

Description

References

• web.archive.org/web/20210106175128/https://community.bmc.com/s/article/SECURITY-Patrol-Agent-Local-Privilege-Escalation-in-BMC-PATROL-Agent-CVE-2020-35593 · Broken Link
• community.bmc.com/s/article/SECURITY-Patrol-Agent-Local-Privilege-Escalation-in-BMC-PATROL-Agent-CVE-2020-35593 · Broken Link
• webapps.bmc.com/support/faces/az/prodallversions.jsp · Product
• securifera.com/advisories · Third Party Advisory
• securifera.com/blog/2021/03/08/bmc-patrol-agent-domain-user-to-domain-admin-part-2 · Exploit

Autres vulnérabilités de patrol agent

• CVE-2023-34257CRITIQUE 9.8An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified (and, by default, authentication i…
• CVE-2019-17044ÉLEVÉE 7.8An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with …
• CVE-2019-17043ÉLEVÉE 7.8An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker …
• CVE-2019-8352CRITIQUE 9.8By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network t…
• CVE-2018-20735ÉLEVÉE 7.8An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for lateral movement and …