CVE-2015-5071: Medium severity bmc remedy action request system vulnerability
AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the report parameter of the BIRT viewer servlet.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID is CVE-2015-5071.
What is the severity of CVE-2015-5071?
The severity of CVE-2015-5071 is medium with a CVSS score of 6.5.
What is the affected software for CVE-2015-5071?
The affected software for CVE-2015-5071 is BMC Remedy AR System Server versions 8.0 and 9.0.
How can remote authenticated users exploit CVE-2015-5071?
Remote authenticated users can exploit CVE-2015-5071 by navigating to arbitrary files using the __report parameter of the BIRT viewer servlet.
Are there any references for CVE-2015-5071?
Yes, you can find references for CVE-2015-5071 at the following links: [Reference 1](https://communities.bmc.com/docs/DOC-77816) and [Reference 2](https://packetstormsecurity.com/files/133688/BMC-Remedy-AR-8.1-9.0-File-Inclusion.html).