CVE-2024-34399: Critical severity bmc remedy mid tier vulnerability
UNSUPPORTED WHEN ASSIGNED An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access any user account without using any password. NOTE: This vulnerability only affects products that are no longer supported by the maintainer and the impacted version for this vulnerability is 7.6.04 only.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34399?
CVE-2024-34399 is classified as critical due to the potential for unauthenticated remote access to user accounts.
How do I fix CVE-2024-34399?
To mitigate CVE-2024-34399, upgrade to a supported version of BMC Remedy Mid Tier, as the affected version is no longer maintained.
Who is affected by CVE-2024-34399?
CVE-2024-34399 affects users of BMC Remedy Mid Tier 7.6.04 that are using versions which are no longer supported.
Can BMC Remedy Mid Tier 7.6.04 be secured against CVE-2024-34399?
No, CVE-2024-34399 cannot be secured against as it pertains to an unsupported version, making it necessary to update to a version that is actively maintained.
What type of attack does CVE-2024-34399 facilitate?
CVE-2024-34399 facilitates unauthorized access by allowing an unauthenticated attacker to compromise user accounts without needing a password.