9.8
CVE-2019-8352
- EPSS 3.83%
- Veröffentlicht 20.05.2019 19:29:00
- Zuletzt bearbeitet 21.11.2024 04:49:44
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginBy default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use them to execute code or escalate privileges on the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bmc ≫ Patrol Agent Version <= 11.3.01
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.83% | 0.877 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.