CVE-2025-55110

Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented. An attacker with read access to the keystore could access sensitive data using this password.

Score

CVSS 4.0 5.7 Medium

Status

Deferred - cert@airbus.com

Published

2025-09-16

Last modified

2025-09-16

Weaknesses

CWE-1392

Affected products

• Control-magent (Bmc)

References

• https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441964
• https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099