Incorrect Access Control in BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System

CVE-2018-18862 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admin+View/, and AR+System+Administration%3A+Server+Information/Default+Admin+View/.

Learn more about our Cis Benchmark Audit For Server Software.