CVE-2019-8352

Name of the Vulnerable Software and Affected Versions BMC PATROL Agent versions prior to 11.3.01

Description The issue allows an attacker to capture network traffic, decrypt user credentials, and potentially execute code or escalate privileges on the network. This is due to the use of a static encryption key for encrypting and decrypting user credentials sent over the network to managed PATROL Agent services.

Recommendations For versions prior to 11.3.01, update to version 11.3.01 or later to resolve the issue.