Remote File Inclusion Vulnerability in BMC Remedy AR System Server
CVE-2015-5071

6.5MEDIUM

Key Information:

Vendor

Bmc

Status
Remedy Ar System Server
Vendor
CVE Published:
15 January 2020

What is CVE-2015-5071?

The BMC Remedy AR System Server's AR System Mid Tier component is susceptible to a remote file inclusion vulnerability. This security flaw enables authenticated users to exploit the __report parameter in the BIRT viewer servlet, potentially allowing them to access sensitive files on the server. Proper patching and security measures should be implemented to mitigate the risks associated with this vulnerability, ensuring the integrity and confidentiality of your applications.

References

https://packetstormsecurity.com/files/133688/BMC-Remedy-A...
x_refsource_MISC
https://communities.bmc.com/docs/DOC-77816
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.