PT-2019-18984 · Bmc · Bmc Patrol Agent

B0Yd + 1 · Publicado 2019-05-20 · Atualizado 2022-03-30 · CVE-2019-8352

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BMC PATROL Agent versions prior to 11.3.01

Description The issue allows an attacker to capture network traffic, decrypt user credentials, and potentially execute code or escalate privileges on the network. This is due to the use of a static encryption key for encrypting and decrypting user credentials sent over the network to managed PATROL Agent services.

Recommendations For versions prior to 11.3.01, update to version 11.3.01 or later to resolve the issue.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-8352

Produtos afetados

Bmc Patrol Agent

Referências · 4

• 🔥 https://exploit-db.com/exploits/46969 · Exploit
• https://securifera.com/advisories/CVE-2019-8352 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-8352 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-8352 · Aviso do Fabricante