CWE
502
Advisory Published
Updated

CVE-2019-16755

First published: Thu Sep 26 2019(Updated: )

BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all versions, service packs, and patches are affected by this vulnerability. Affected SmartIT versions: 1.x, 2.0, 18.05, 18.08, and 19.02, all versions, service packs, and patches are affected by this vulnerability.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Bmc Myit Digital Workplace<18.08.00

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the vulnerability ID for this BMC Remedy ITSM Suite vulnerability?

    The vulnerability ID for this BMC Remedy ITSM Suite vulnerability is CVE-2019-16755.

  • What is the severity level of CVE-2019-16755?

    CVE-2019-16755 has a severity level of critical.

  • What software versions are affected by CVE-2019-16755?

    DWP versions 3.x to 18.x (up to exclusive) of BMC Remedy ITSM Suite are affected by CVE-2019-16755.

  • How can remote attackers exploit CVE-2019-16755?

    Remote attackers can exploit CVE-2019-16755 to perform pre-authenticated remote command execution on the targeted operating system running the BMC Remedy ITSM Suite.

  • Where can I find more information about CVE-2019-16755?

    You can find more information about CVE-2019-16755 on the BMC website at the following URL: [link](https://bmcsites.force.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA21O000000gnYQSAY&type=Solution).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203