Approved changes feed: RSS · Atom

cpe:2.3:a:bmc:remedy_action_request_system_server:7.1:*:*:*:*:*:*:*

part: a version: 7.1 update: *

VendorBmc (41db0501-28a3-55f2-9e02-2ebb9bfb3ab9)
ProductRemedy Action Request System Server (b7735115-35a4-513e-9bcc-86c28ad53cb2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19505 vulnerable 2026-06-03 14:38:29.348573 Details available
Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution involving a UserData_Init call.
Published: 2019-01-03T19:00:00.000Z
Updated: 2024-08-05T11:37:11.522Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.