BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability.
The specific flaw exists within the processing of email attachments. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-14122.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: zdi
Published: 2024-05-07T22:54:54.220Z
Updated: 2024-08-04T00:26:55.723Z
Reserved: 2021-06-17T19:27:05.669Z
Link: CVE-2021-35002
Vulnrichment
Updated: 2024-08-04T00:26:55.723Z
NVD
Status : Awaiting Analysis
Published: 2024-05-07T23:15:14.313
Modified: 2024-05-08T13:15:00.690
Link: CVE-2021-35002
Redhat
No data.