Keystore Vulnerability in Control-M/Agents by BMC Software

CVE-2025-55110

What is CVE-2025-55110?

Control-M/Agents utilize a kdb or PKCS#12 keystore by default, where the default keystore password is publicly documented. This configuration allows an attacker with read access to the keystore to exploit the well-known password, potentially compromising sensitive data. It is crucial for users of Control-M/Agents to take immediate action to secure their keystores and consider changing the default password to mitigate this risk. For further guidance on addressing this vulnerability, refer to the vendor's advisory.

References