CVE-2024-1606 - OpenCVE

Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via injection of HTML code. This might lead to a successful phishing attack for example by tricking users into using a hyperlink pointing to a website controlled by an attacker. Fix for 9.0.20 branch was released in version 9.0.20.238. Fix for 9.0.21 branch was released in version 9.0.21.200.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://cert.pl/en/posts/2024/03/CVE-2024-1604
https://cert.pl/posts/2024/03/CVE-2024-1604
https://www.bmc.com/it-solutions/control-m.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: CERT-PL

Published: 2024-03-18T10:00:05.221Z

Updated: 2024-08-27T20:06:28.801Z

Reserved: 2024-02-18T21:40:59.791Z

Link: CVE-2024-1606

Vulnrichment

Updated: 2024-08-01T18:48:21.823Z

NVD

Status : Awaiting Analysis

Published: 2024-03-18T10:15:20.863

Modified: 2024-03-18T12:38:25.490

Link: CVE-2024-1606

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-1606", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "state": "PUBLISHED", "assignerShortName": "CERT-PL", "dateReserved": "2024-02-18T21:40:59.791Z", "datePublished": "2024-03-18T10:00:05.221Z", "dateUpdated": "2024-08-27T20:06:28.801Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "product": "Control-M", "vendor": "BMC", "versions": [{"lessThan": "9.0.20.238", "status": "affected", "version": "9.0.20", "versionType": "custom"}, {"lessThan": "9.0.21.200", "status": "affected", "version": "9.0.21", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Maksymilian Kubiak [Afine Team]"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Dawid Ma\u0142ecki [Afine Team]"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<div>Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via injection of HTML code. This might lead to a successful phishing attack for example by tricking users into using a hyperlink pointing to a website controlled by an attacker.<br></div><div><br></div><div>Fix for 9.0.20 branch was released in version 9.0.20.238. <span style=\"background-color: rgb(255, 255, 255);\">Fix for 9.0.21 branch was released in version 9.0.21.200. </span><br></div>"}], "value": "Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for\u00a0manipulation of generated web pages via injection of HTML code. This might lead to a successful phishing attack for example by tricking users into using a hyperlink pointing to a website controlled by an attacker.\n\nFix for 9.0.20 branch was released in version 9.0.20.238.\u00a0Fix for 9.0.21 branch was released in version 9.0.21.200. \n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-80", "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2024-03-18T10:00:05.221Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://cert.pl/posts/2024/03/CVE-2024-1604"}, {"tags": ["third-party-advisory"], "url": "https://cert.pl/en/posts/2024/03/CVE-2024-1604"}, {"tags": ["product"], "url": "https://www.bmc.com/it-solutions/control-m.html"}], "source": {"discovery": "UNKNOWN"}, "title": "HTML injection in BMC Control-M", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:48:21.823Z"}, "title": "CVE Program Container", "references": [{"tags": ["third-party-advisory", "x_transferred"], "url": "https://cert.pl/posts/2024/03/CVE-2024-1604"}, {"tags": ["third-party-advisory", "x_transferred"], "url": "https://cert.pl/en/posts/2024/03/CVE-2024-1604"}, {"tags": ["product", "x_transferred"], "url": "https://www.bmc.com/it-solutions/control-m.html"}]}, {"affected": [{"vendor": "bmc", "product": "control-m", "cpes": ["cpe:2.3:a:bmc:control-m:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "9.0.20", "status": "affected", "lessThan": "9.0.20.238", "versionType": "custom"}, {"version": "9.0.21", "status": "affected", "lessThan": "9.0.21.200", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-19T15:51:58.875820Z", "id": "CVE-2024-1606", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-27T20:06:28.801Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://cert.pl/posts/2024/03/CVE-2024-1604", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://cert.pl/en/posts/2024/03/CVE-2024-1604", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://www.bmc.com/it-solutions/control-m.html", "tags": ["product", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:48:21.823Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-1606", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-03-19T15:51:58.875820Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:bmc:control-m:-:*:*:*:*:*:*:*"], "vendor": "bmc", "product": "control-m", "versions": [{"status": "affected", "version": "9.0.20", "lessThan": "9.0.20.238", "versionType": "custom"}, {"status": "affected", "version": "9.0.21", "lessThan": "9.0.21.200", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-27T20:06:22.619Z"}}], "cna": {"title": "HTML injection in BMC Control-M", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Maksymilian Kubiak [Afine Team]"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Dawid Ma\u0142ecki [Afine Team]"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "BMC", "product": "Control-M", "versions": [{"status": "affected", "version": "9.0.20", "lessThan": "9.0.20.238", "versionType": "custom"}, {"status": "affected", "version": "9.0.21", "lessThan": "9.0.21.200", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert.pl/posts/2024/03/CVE-2024-1604", "tags": ["third-party-advisory"]}, {"url": "https://cert.pl/en/posts/2024/03/CVE-2024-1604", "tags": ["third-party-advisory"]}, {"url": "https://www.bmc.com/it-solutions/control-m.html", "tags": ["product"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for\u00a0manipulation of generated web pages via injection of HTML code. This might lead to a successful phishing attack for example by tricking users into using a hyperlink pointing to a website controlled by an attacker.\n\nFix for 9.0.20 branch was released in version 9.0.20.238.\u00a0Fix for 9.0.21 branch was released in version 9.0.21.200. \n\n", "supportingMedia": [{"type": "text/html", "value": "<div>Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via injection of HTML code. This might lead to a successful phishing attack for example by tricking users into using a hyperlink pointing to a website controlled by an attacker.<br></div><div><br></div><div>Fix for 9.0.20 branch was released in version 9.0.20.238. <span style=\"background-color: rgb(255, 255, 255);\">Fix for 9.0.21 branch was released in version 9.0.21.200. </span><br></div>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-80", "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page"}]}], "providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2024-03-18T10:00:05.221Z"}}}, "cveMetadata": {"cveId": "CVE-2024-1606", "state": "PUBLISHED", "dateUpdated": "2024-08-27T20:06:28.801Z", "dateReserved": "2024-02-18T21:40:59.791Z", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "datePublished": "2024-03-18T10:00:05.221Z", "assignerShortName": "CERT-PL"}, "dataVersion": "5.1"}