Patrol

patrol

Vendor: Bmc • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-34258 1Bmc 1Patrol Jun 17, 2026 May 31, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be...Show more An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.Show less
CVE-2017-13130 1Bmc 1Patrol May 13, 2026 Aug 23, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.
CVE-2016-9638 1Bmc 1Patrol May 6, 2026 Dec 2, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" pr...Show more In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to elevate their privileges to root.Show less