Vulnerabilities > BMC > Remedy Action Request System > 9.0

DATE CVE VULNERABILITY TITLE RISK
2016-12-21 CVE-2016-2349 Weak Password Recovery Mechanism for Forgotten Password vulnerability in BMC Remedy Action Request System 8.1/9.0/9.1
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password.
network
low complexity
bmc CWE-640
5.0