CVE-2016-1543: The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and…

High severity · published Jun 13, 2016

CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and…

7.5

CVSS

71.9%

EPSS

On KEV

Description

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)71.9% · higher than 99% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Bladelogic Server Automation Console · Bmc

8.2.02; 8.2.03; 8.2.04; 8.3.00; 8.3.01; 8.3.02; +5 more · source: NVD

Affected product

Bladelogic Server Automation Console

Bmc

All Bladelogic Server Automation Console CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2016-1543

CVE.org

https://www.cve.org/CVERecord?id=CVE-2016-1543

packetstormsecurity.com

http://packetstormsecurity.com/files/136462/BMC-Server-Automation-BSA-RSCD-Agent-Unauthorized-Password-Reset.html

www.securityfocus.com

http://www.securityfocus.com/archive/1/537910/100/0/threaded

Patch

https://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solution

www.exploit-db.com

https://www.exploit-db.com/exploits/43902/

www.exploit-db.com

https://www.exploit-db.com/exploits/43939/

www.insinuator.net

https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/

More from Bladelogic Server Automation Console

9.8

CVE-2016-4322

BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other…

7.5

CVE-2016-1542

The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and…