CVE-2017-17677

BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2021-05-19

Last modified

2026-07-09

Weaknesses

CWE-732

Affected products

• Remedy Mid-tier (Bmc)

References

• https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html
• https://seclists.org/fulldisclosure/2017/Oct/52