medium5.3
CVE-2017-17675
BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking.
Impact
BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bmc | Remedy Mid-Tier | Version 9.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html
- https://seclists.org/fulldisclosure/2017/Oct/52
- https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html
- https://seclists.org/fulldisclosure/2017/Oct/52