Local Privilege Escalation Vulnerability in BMC PATROL Agent
CVE-2020-35593

7.8HIGH

Key Information:

Vendor

Bmc

Status
Patrol Agent
Vendor
CVE Published:
5 September 2023

What is CVE-2020-35593?

The BMC PATROL Agent, up to version 20.08.00, contains a vulnerability that allows a local user to escalate privileges through carefully crafted commands involving pconfig and the +RESTART -host parameter. This flaw can potentially allow unauthorized users to gain higher access levels, compromising system integrity and security. It is crucial for users and administrators of BMC PATROL Agent to apply necessary patches and updates to mitigate risks associated with this vulnerability.

References

https://www.securifera.com/advisories/
https://webapps.bmc.com/support/faces/az/prodallversions....
https://community.bmc.com/s/article/SECURITY-Patrol-Agent...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.