CVE-2017-17678

概要

参考情報

• docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html · Release Notes
• seclists.org/fulldisclosure/2017/Oct/52 · Mailing List

remedy mid-tier のその他の脆弱性

• CVE-2024-34398中 4.2An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers.
• CVE-2024-34399緊急 9.8**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access an…
• CVE-2017-17677高 8.8BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templa…
• CVE-2017-17675中 5.3BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker t…
• CVE-2017-17674緊急 9.8BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the syst…