Vulnerabilities

TI-2019-13845 CVE-2019-19215 · GHSA-wfjr-fx5q-m6gw

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action…

MEDIUM 41

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01596 Published 2020-04-30 No fix listed CWE-120

TI-2019-13846 CVE-2019-19216 · GHSA-qc7r-vrf5-g6m3

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.

MEDIUM 40

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01057 Published 2020-04-30 No fix listed CWE-269

TI-2019-13847 CVE-2019-19217 · GHSA-w853-h397-7m3j

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.

MEDIUM 42

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01815 Published 2020-04-30 No fix listed CWE-78

TI-2019-13848 CVE-2019-19218 · GHSA-j472-w4m9-xqxg

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.

LOW 35

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00997 Published 2020-04-30 No fix listed CWE-522

TI-2019-13849 CVE-2019-19219 · GHSA-q6xg-7pxg-rxj9

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.

LOW 35

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01052 Published 2020-04-30 No fix listed

TI-2019-13850 CVE-2019-19220 · GHSA-2qfw-w52x-q628

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).

MEDIUM 42

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01815 Published 2020-04-30 No fix listed CWE-78

Vulnerabilities

Filters

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action…

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).