PT-2024-25856
CVE-2024-34399
·
Published
2024-09-18
·
Updated
2025-10-14
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
BMC Remedy Mid Tier version 7.6.04
Description
An issue was discovered that allows an unauthenticated remote attacker to access any user account without using a password. This issue affects products that are no longer supported by the maintainer.
Recommendations
For BMC Remedy Mid Tier version 7.6.04, consider disabling remote access or restricting user account access until a resolution can be determined, however, since this version is no longer supported, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾