Outdated Control-M/Agent Vulnerabilities by BMC Software

CVE-2025-55111

What is CVE-2025-55111?

Certain versions of BMC Control-M/Agent exhibit insufficient file permission settings. This allows local users to access sensitive files containing SSL keys, passwords, and other critical security information. The vulnerability is present in out-of-support versions 9.0.18 to 9.0.20, and potentially earlier unsupported versions, as well as in later versions that have been upgraded from the affected ones. Proper mitigation strategies should be implemented to restrict access and protect sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References