Back to search
CVE-2018-19505
Published: Jan 3, 2019
Modified: Aug 5, 2024
PUBLISHED
Description
Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution involving a UserData_Init call.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
1042177
vdb-entry
x_refsource_SECTRACK
20181127 CVE-2018-19505 - Impersonation may lead to incorrect user context in Remedy AR System Server in BMC Remedy 7.1
mailing-list
x_refsource_FULLDISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now