BMC Track-It! 11.4 Hot Fix 2
Approved changes feed: RSS · Atom
cpe:2.3:a:bmc:track-it\!:11.4:hf2:*:*:*:*:*:*
part: a version: 11.4 update: hf2
| Vendor | Bmc (41db0501-28a3-55f2-9e02-2ebb9bfb3ab9) |
|---|---|
| Product | Track It! (812443f4-2974-5048-87c0-abc4e87ba317) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-6599 |
vulnerable | 2026-06-03 14:36:00.758629 |
Details available
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the domain administrator username and password. These are encrypted with a fixed key and IV ("NumaraIT") using the DES algorithm. The domain administrator username and password can only be obtained if the Self-Service component is enabled, which is the most common scenario in enterprise deployments.
Published: 2018-01-30T20:00:00.000Z
Updated: 2024-08-06T01:36:28.607Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6598 |
vulnerable | 2026-06-03 14:36:00.758005 |
Details available
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web root and achieve code execution as NETWORK SERVICE or SYSTEM.
Published: 2018-01-30T20:00:00.000Z
Updated: 2024-08-06T01:36:28.212Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.