« Volver al listado

CVE-2022-35864

Estado: ModificadaMedia (6.5)—

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-16690.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

BMC — Track-it!

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-35864",
  "cveTags": [],
  "metrics": {
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "zdi-disclosures@trendmicro.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.6
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "zdi-disclosures@trendmicro.com",
      "affectedData": [
        {
          "vendor": "BMC",
          "product": "Track-It!",
          "versions": [
            {
              "status": "affected",
              "version": "20.21.02.109"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-08-03T16:15:08.647",
  "references": [
    {
      "url": "https://community.bmc.com/s/article/Security-vulnerabilities-patched-in-Track-It-Version-2",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "zdi-disclosures@trendmicro.com"
    },
    {
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-967/",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "zdi-disclosures@trendmicro.com"
    },
    {
      "url": "https://community.bmc.com/s/article/Security-vulnerabilities-patched-in-Track-It-Version-2",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-967/",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "zdi-disclosures@trendmicro.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-16690."
    },
    {
      "lang": "es",
      "value": "Esta vulnerabilidad permite a atacantes remotos divulgar información sensible en las instalaciones afectadas de BMC Track-It! versión 20.21.02.109. Es requerida una autenticación para explotar esta vulnerabilidad. El fallo específico se presenta en el endpoint GetPopupSubQueryDetails. El problema resulta de la falta de comprobación apropiada de una cadena suministrada por el usuario antes de usarla para construir consultas SQL. Un atacante puede aprovechar esta vulnerabilidad para divulgar las credenciales almacenadas, conllevando a un mayor compromiso. Era ZDI-CAN-16690"
    }
  ],
  "lastModified": "2026-06-17T04:52:25.027",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bmc:track-it\\!:20.19.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80B5F6EB-E001-4D1F-8428-99AF9DC3D4B3"
            },
            {
              "criteria": "cpe:2.3:a:bmc:track-it\\!:20.20.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D2C30FF-FF7C-4F8C-ACB8-A3BC3CFE1EAC"
            },
            {
              "criteria": "cpe:2.3:a:bmc:track-it\\!:20.20.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F8B4BD9-9197-49C7-9E1D-EEA831E0CCF5"
            },
            {
              "criteria": "cpe:2.3:a:bmc:track-it\\!:20.20.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFA184EF-A951-4E16-B11B-EE7A6456D974"
            },
            {
              "criteria": "cpe:2.3:a:bmc:track-it\\!:20.21.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A0E5F78-3CA7-4E92-B714-09E2FCC51DB7"
            },
            {
              "criteria": "cpe:2.3:a:bmc:track-it\\!:20.21.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "433AA79E-D04C-4128-A55D-1A695D3DEA09"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "zdi-disclosures@trendmicro.com"
}