Privilege Escalation Vulnerability in BMC PATROL Agent
CVE-2018-20735

7.8HIGH

Key Information:

Vendor

Bmc

Status
Patrol Agent
Vendor
CVE Published:
17 January 2019

What is CVE-2018-20735?

A vulnerability in BMC PATROL Agent allows for possible lateral movement and privilege escalation within Windows Active Directory environments. The PatrolCli application fails to verify user permissions adequately, permitting even low-privileged domain users to authenticate and run commands on high-value targets, including domain controllers. This exposes the network to significant risks as unauthorized users could potentially elevate their access to domain admin capabilities through inadequate configuration of the PatrolCli application.

References

https://www.securifera.com/blog/2018/12/17/bmc-patrol-age...
x_refsource_MISC
https://www.exploit-db.com/exploits/46556/
exploitx_refsource_EXPLOIT-DB

EPSS Score

38% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.