high8.8
CVE-2017-17677
BMC Remedy 9.1SP3 is affected by authenticated code execution.
Impact
BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bmc | Remedy Mid-Tier | Version 9.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html
- https://seclists.org/fulldisclosure/2017/Oct/52
- https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html
- https://seclists.org/fulldisclosure/2017/Oct/52