CVE-2022-35864: BMC Track-It! GetPopupSubQueryDetails SQL Injection Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-16690.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.
— ZDI
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-35864?
CVE-2022-35864 refers to a SQL Injection Information Disclosure Vulnerability in BMC Track-It! 20.21.02.109.
How severe is CVE-2022-35864?
CVE-2022-35864 has a severity score of 6.5, which is classified as medium.
How can I exploit CVE-2022-35864?
To exploit CVE-2022-35864, remote attackers would need to authenticate and send a crafted SQL query to the GetPopupSubQueryDetails endpoint in BMC Track-It! 20.21.02.109.
What versions of BMC Track-It! are affected by CVE-2022-35864?
CVE-2022-35864 affects BMC Track-It! versions 20.19.03, 20.20.01, 20.20.02, 20.20.03, 20.21.01, and 20.21.02.
How can I fix CVE-2022-35864?
To fix CVE-2022-35864, it is recommended to apply the patches provided by BMC to the affected versions of BMC Track-It!.