Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2019-8352

EPSS 3.83% · P88
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-8352

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use them to execute code or escalate privileges on the network.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
BMC Software PATROL Agent 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bmc Software BMC Software PATROL Agent是美国BMC Software(Bmc Software)公司的一款BMC ProactiveNet架构的核心组件,它主要用于监控和管理分布式环境。 BMC PATROL Agent 11.3.01及之前版本中存在信任管理问题漏洞,该漏洞源于程序使用静态密钥加密/解密用户凭证。攻击者可利用该漏洞执行代码或提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2019-8352

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-8352

Please Login to view more intelligence information

Same Patch Batch · n/a · 2019-05-20 · 23 CVEs total

CVE-2019-12215Matomo 信息泄露漏洞
CVE-2019-12198GoHTTP 缓冲区错误漏洞
CVE-2019-11809Joomla! 跨站脚本漏洞
CVE-2019-12206NGINX njs 缓冲区错误漏洞
CVE-2019-12207NGINX njs 缓冲区错误漏洞
CVE-2019-12208NGINX njs 缓冲区错误漏洞
CVE-2018-12270Valve Steam 输入验证错误漏洞
CVE-2019-12211FreeImage 缓冲区错误漏洞
CVE-2019-12212FreeImage 资源管理错误漏洞
CVE-2019-12213FreeImage 资源管理错误漏洞
CVE-2019-12214FreeImage 缓冲区错误漏洞
CVE-2019-11816Deciso OPNsense和Rubicon Communications pfSense 访问控制错误漏洞
CVE-2019-12216Simple DirectMedia Layer 缓冲区错误漏洞
CVE-2019-12217Simple DirectMedia Layer 代码问题漏洞
CVE-2019-12218Simple DirectMedia Layer 代码问题漏洞
CVE-2019-12219Simple DirectMedia Layer 资源管理错误漏洞
CVE-2019-12220Simple DirectMedia Layer 缓冲区错误漏洞
CVE-2019-12221Simple DirectMedia Layer 缓冲区错误漏洞
CVE-2019-12222Simple DirectMedia Layer 缓冲区错误漏洞
CVE-2019-12239WordPress WP Booking System插件SQL跨站请求伪造漏洞

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2019-8352

No comments yet


Leave a comment