SSRF in Bmc Remedy_mid-tier
CVE-2017-17674
BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side…
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.026 (83.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Bmc Remedy_mid-tier — versions 9.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Product, x_refsource_MISC)
- cve@mitre.org (Product, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC, Release Notes, Vendor Advisory)
- cve@mitre.org (Mailing List, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2017-17674?
- CVE-2017-17674 is a critical-severity vulnerability in Bmc Remedy_mid-tier, classified under Server-Side Request Forgery (SSRF). CVSS score: 9.8/10. Published 2021-05-19.
- How severe is CVE-2017-17674?
- Critical severity. CVSS v3 base score is 9.8 out of 10.