Priority HIGH 69
BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2023-09-05 · No fix listed CWE-269
Priority HIGH 82
An issue was discovered in BMC Patrol through 23.1.00.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01036 · Published 2023-05-31 · No fix listed
Priority LOW 34
An issue was discovered in BMC Patrol Agent 9.0.10i.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00369 · Published 2019-10-14 · No fix listed CWE-276
Priority LOW 34
An issue was discovered in BMC Patrol Agent 9.0.10i.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2019-10-14 · No fix listed CWE-276
Priority MEDIUM 51
By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06283 · Published 2019-05-20 · No fix listed CWE-798
Priority MEDIUM 44
An issue was discovered in BMC PATROL Agent through 11.3.01.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.07488 · Published 2019-01-17 · No fix listed CWE-287
Priority LOW 33
Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01312 · Published 2014-05-14 · No fix listed
Priority MEDIUM 53
Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled w…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07823 · Published 2009-01-27 · No fix listed CWE-134
Priority LOW 26
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01614 · Published 2002-03-09 · No fix listed
Priority MEDIUM 47
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0216 · Published 2002-03-09 · No fix listed
Priority LOW 33
BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00917 · Published 2001-09-12 · No fix listed
Priority LOW 32
BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00346 · Published 2001-09-12 · No fix listed
Priority MEDIUM 47
Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02234 · Published 2000-02-04 · No fix listed
THREATIST.IORead the docs