Approved changes feed: RSS · Atom

cpe:2.3:a:bmc:patrol:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBmc (41db0501-28a3-55f2-9e02-2ebb9bfb3ab9)
ProductPatrol (192a0d74-1ba1-5836-be58-7e22f6bad2d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34258 vulnerable 2026-06-03 14:52:16.144123 Details available
An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.
Published: 2023-05-31T00:00:00.000Z
Updated: 2025-01-08T21:11:19.507Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9638 vulnerable 2026-06-03 14:36:17.088222 Details available
In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to elevate their privileges to root.
Published: 2016-12-02T17:00:00.000Z
Updated: 2024-08-06T02:59:03.066Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.