PT-2022-22975 · Bmc · Bmc Track-It!

Y4Er · Published 2022-07-12 · Updated 2022-08-09 · CVE-2022-35864

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BMC Track-It! version 20.21.02.109

Description This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is required to exploit this issue. The specific flaw exists within the "GetPopupSubQueryDetails" endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this issue to disclose stored credentials, leading to further compromise.

Recommendations For version 20.21.02.109, as a temporary workaround, consider restricting access to the "GetPopupSubQueryDetails" endpoint until a patch is available. Additionally, ensure proper validation of user-supplied strings to prevent SQL injection attacks. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-35864

ZDI-22-967

Affected Products

Bmc Track-It!

References · 6

• https://zerodayinitiative.com/advisories/ZDI-22-967 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-35864 · Security Note
• https://community.bmc.com/s/article/Security-vulnerabilities-patched-in-Track-It-Version-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35864 · Vendor Advisory
• https://t.me/cibsecurity/47508 · Telegram Post
• https://t.me/cvenotify/34445 · Telegram Post