| Package | Affected versions | Patched versions |
|---|---|---|
| remedy action request system | = 8.1= 9.0= 9.1 |
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free