Vulnerabilities > CVE-2019-16755 - Deserialization of Untrusted Data vulnerability in BMC Myit Digital Workplace

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
bmc
CWE-502
NVD
Published: 2019-09-26
Updated: 2019-10-02

Summary

BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all versions, service packs, and patches are affected by this vulnerability. Affected SmartIT versions: 1.x, 2.0, 18.05, 18.08, and 19.02, all versions, service packs, and patches are affected by this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Bmc
18

Common Weakness Enumeration (CWE)

References