CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure.

Score

CVSS 3.0 7.5 High

Status

Modified - cret@cert.org

Published

2016-06-13

Last modified

2024-08-05

Weaknesses

CWE-284

Affected products

• Bladelogic Server Automation Console (Bmc)

References

• http://packetstormsecurity.com/files/136462/BMC-Server-Automation-BSA-RSCD-Agent-Unauthorized-Password-Reset.html
• http://www.securityfocus.com/archive/1/537910/100/0/threaded
• https://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solution
• https://www.exploit-db.com/exploits/43902/
• https://www.exploit-db.com/exploits/43939/
• https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/