Remote and Local File Inclusion Vulnerability in BMC Remedy Mid Tier Software

CVE-2017-17674

What is CVE-2017-17674?

BMC Remedy Mid Tier 9.1SP3 is susceptible to remote and local file inclusion vulnerabilities. This flaw allows attackers to exploit the system by accessing restricted files, leading to potential threats such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), and remote code execution (RCE). The vulnerability arises from inadequate restrictions on input parameters, allowing malicious entities to manipulate the application to disclose sensitive information or execute unauthorized commands.

References