VYPR

Remedy Action Request System Server

by BMC Software

CVEs (1)

  • CVE-2018-19505MedJan 3, 2019
    risk 0.42cvss 6.5epss 0.02

    Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution…