PT-2020-7853 · Bmc · Bmc Remedy Ar System Server

Published 2020-01-15 · Updated 2020-01-24 · CVE-2015-5072

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: BMC Remedy AR System Server versions prior to 9.0 SP1

Description: The issue allows remote authenticated users to access arbitrary local files. This is achieved by manipulating the imageid parameter in the BIRT Engine servlet, part of the AR System Mid Tier component.

Recommendations: For versions prior to 9.0 SP1, update to version 9.0 SP1 or later to resolve the issue. As a temporary workaround, consider restricting access to the BIRT Engine servlet to minimize the risk of exploitation. Avoid using the imageid parameter in the affected servlet until the issue is resolved.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2015-5072

Affected Products

Bmc Remedy Ar System Server

References · 3

• https://communities.bmc.com/docs/DOC-77816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5072 · Security Note
• https://packetstormsecurity.com/files/133689/BMC-Remedy-AR-8.1-9.0-File-Inclusion.html · Note