Security Advisory

CVE-2024-1604

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-18 09:59:35

Last updated 2024-10-10 15:36:14

Assigner CERT-PL

State PUBLISHED

Description

Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to read and make unauthorized changes to any reports available within the application, even without proper permissions. The attacker must know the unique identifier of the report they want to manipulate. Fix for 9.0.20 branch was released in version 9.0.20.238. Fix for 9.0.21 branch was released in version 9.0.21.201.

← Browse all CVEs View on cve.org ↗