CVE-2025-55110CWE-1392
BMC Control-M/Agent hardcoded default keystore password
Medium · published September 16, 2025
What it is
Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented.
An attacker with read access to the keystore could access sensitive data using this password.
The record
Technical detail
- CVSS v4.0
- 5.7 · MEDIUM
- Vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00138 · 2.9th percentile
- Weakness
- CWE-1392 · Use of Default Credentials
- Published
- 2025-09-16T12:16Z
EPSS history
Timeline