COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2017-17674

CVE-2017-17674

Severity
critical
Source
NVD · cve
Published
2021-05-19
CVSS
9.8
Reference
https://nvd.nist.gov/vuln/detail/CVE-2017-17674
⚡ RCE shame 50/100 rce

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code ex

Players implicated

BMC Software · vendorremedy mid-tier · product

Description

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code execution (RCE).

Sentiment · trusted sources

Affected FedRAMP products 1 in the catalog

ProductProviderStatusMatch
BMC Helix BMC Software Authorized vendor-exact · 0.90