Sensitive Information Exposure in BMC IT Service Management Suite
CVE-2026-113693
5.3MEDIUM
What is CVE-2026-113693?
The BMC IT Service Management Suite faces a vulnerability that permits authenticated users to access sensitive information, specifically system usernames and encrypted password values from the SmartIT system's account settings. This exposure could pose a risk to system integrity and user security, allowing unauthorized access to critical configurations.
Affected Version(s)
BMC IT Service Management Suite 25.3.01
BMC IT Service Management Suite 25.4.01
BMC IT Service Management Suite 26.1.01
