VULNERABILITY INTELLIGENCE

CVE-2014-8270

CVSS score5 MEDIUM

EPSS probability19.93%

CISA KEVNot currently listed

Published2014-12-12

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset.

Primary references

cret@cert.org — Broken Link, Vendor Advisory
cret@cert.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry