CVE-2017-17678

Mô tả

Tham khảo

• docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html · Release Notes
• seclists.org/fulldisclosure/2017/Oct/52 · Mailing List

Lỗ hổng khác của remedy mid-tier

• CVE-2024-34398TRUNG BÌNH 4.2An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers.
• CVE-2024-34399NGHIÊM TRỌNG 9.8**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access an…
• CVE-2017-17677CAO 8.8BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templa…
• CVE-2017-17675TRUNG BÌNH 5.3BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker t…
• CVE-2017-17674NGHIÊM TRỌNG 9.8BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the syst…