VULNERABILITY INTELLIGENCE

CVE-2017-17674

CVSS score9.8 CRITICAL

EPSS probability2.08%

CISA KEVNot currently listed

Published2021-05-19

Last modified2026-07-09

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code execution (RCE).

Weakness classification

CWE-918: Server-Side Request Forgery (SSRF)

Primary references

cve@mitre.org — Release Notes, Vendor Advisory
cve@mitre.org — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory