PT-2021-8568
CVE-2017-17675
·
Published
2021-05-19
·
Updated
2026-07-09
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
BMC Remedy Mid Tier version 9.1SP3
Description
The issue allows remote logging to be accessed by unauthenticated users, enabling an attacker to hijack system logs. This can include sensitive data such as user names and HTTP data.
Recommendations
For BMC Remedy Mid Tier version 9.1SP3, consider restricting access to remote logging to prevent unauthenticated users from accessing system logs until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾