Jean-Romain Garnier

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects : * Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions. * Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions

Messaging consumer functionality allows unsafe deserialization of user-controlled data without sufficient restriction of allowed object types. This may enable an authenticated attacker to trigger unintended server-side behavior by providing crafted serialized content. Deserialization is the process of converting a data format, such as JSON or XML, back into an object that can be used by a program.

A communication command fails to sufficiently filter or sanitize user-supplied input. This flaw allows an unauthenticated attacker to execute unauthorized commands on the server, which could lead to a full system compromise.

Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords. This flaw could allow an attacker who has obtained credential data to perform offline password recovery attacks.

This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the privet API, resulting from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this issue to execute code in the context of root.