BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability

CVE-2021-35001

What is CVE-2021-35001?

The vulnerability identified in BMC Track-It! allows remote attackers to access and disclose sensitive information due to improper authorization checks in the GetData endpoint. When exploited, this vulnerability can enable an attacker to retrieve stored credentials, creating a pathway for further attacks and compromising user data. The flaw emphasizes the need for robust authentication mechanisms to secure sensitive endpoints and prevent unauthorized access.

References