CVE-2015-5072 | BDVDB-2026-129086 Detail

Description#

The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the __imageid parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://communities.bmc.com/docs/DOC-77816
https://packetstormsecurity.com/files/133689/BMC-Remedy-AR-8.1-9.0-File-Inclusion.html

Exploit#

No public exploit known

History#

Version 12020-01-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.