Unrated severityNVD Advisory· Published May 31, 2023· Updated Jan 8, 2025

CVE-2023-34258

Description

An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

BMC Software/Patrol Agentcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <22.1.00

Patches

Vulnerability mechanics

References

gist.github.com/gquere/045638b9959f4b3e119ea01d8d6ff856mitre
www.errno.fr/PatrolAdvisory.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000