PT-2023-10647 · Bmc · Bmc Server Automation

Publicado 2023-09-05 · Atualizado 2023-09-09 · CVE-2017-9453

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BMC Server Automation versions prior to 8.9.01 patch 1

Description The issue allows for Process Spawner command execution due to an authentication bypass.

Recommendations For versions prior to 8.9.01 patch 1, apply patch 1 to resolve the issue.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2017-9453

Produtos afetados

Bmc Server Automation

Referências · 4

• https://docs.bmc.com/docs/serverautomation/2002/notification-of-critical-security-issue-in-bmc-server-automation-cve-2017-9453-1020706453.html · Aviso do Fabricante
• https://t.me/cibsecurity/69881 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-9453 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9453 · Aviso do Fabricante