BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on Windows has a database connection on, it runs 'DBUStatus.exe' frequently, which then calls 'dbu_connection_details.vbs' with the username, password, database hostname, and port written in cleartext, which can be seen in event and process logs in two separate locations. Fixed in PACTV.9.0.21.307.
oryginał ENCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XBmc Control M\/server
APPBmc9.0.21.300
Powiązane podatności
BMC Control-M/MFT — zakodowane na stałe dane logowania w kodzie (hardcoded credentials)
Path traversal w BMC Control-M/Agent prowadzący do privilege escalation
BMC Control-M/Agent: Bypass ACL przez NULL byte w certyfikacie klienta
BMC Control-M/Agent: Authentication Bypass przez niezabezpieczony keystore
Buffer overflow w BMC Control-M/Agent umożliwiający privilege escalation