Vulnerabilities (CVE)

Filtered by vendor Bmc Subscribe
Filtered by product Performance Manager
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-1972 1 Bmc 1 Performance Manager 2024-04-11 7.5 HIGH N/A
PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the vendor disputes this vulnerability, stating that it does not exist when the system is properly configured