medium5.3Public exploit code
CVE-2016-5063
The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks an…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BMC BladeLogic RSCD Agent 8.3.00.64 - Windows Users Disclosure2018-01-30 · webapps · windows
- BMC BladeLogic 8.3.00.64 - Remote Command Execution2018-01-26 · remote · multiple
Impact
The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bmc | Server Automation | through 8.6 through 8.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/93948
- https://docs.bmc.com/docs/display/bsa87/Notification+of+Windows+RSCD+Agent+vulnerability+in+BMC+Server+Automation+CVE-2016-5063
- https://www.exploit-db.com/exploits/43902/
- https://www.exploit-db.com/exploits/43934/
- http://www.securityfocus.com/bid/93948
- https://docs.bmc.com/docs/display/bsa87/Notification+of+Windows+RSCD+Agent+vulnerability+in+BMC+Server+Automation+CVE-2016-5063
- https://www.exploit-db.com/exploits/43902/
- https://www.exploit-db.com/exploits/43934/