CVE-2023-39122

概要

参考情報

• DojoSecurity/BMC-Control-M-Unauthenticated-SQL-Injection · Third Party Advisory

control-m のその他の脆弱性

• CVE-2024-1606中 5.4Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via …
• CVE-2024-1605高 7.8BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that grants Write and Read…
• CVE-2024-1604中 6.8Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to re…
• CVE-2023-26550緊急 9.8A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON fie…