CVE-2023-34258

An issue was discovered in BMC Patrol before 22.1.00

High · published May 31, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00809 · 56.5th percentile
Published
2023-05-31T00:00Z
EPSS history
Timeline
  • 31 MAY 00:00Z
    An issue was discovered in BMC Patrol before 22.1.00
    cvelistv5