CVE-2024-1604

Summary

CVE-2024-1604 is a vulnerability affecting the report management and creation module in BMC Control-M branches 9.0.20 and 9.0.21. This issue results in improper authorization, enabling logged-in users to read and manipulate reports unauthorizedly, even without the necessary permissions. The attacker requires knowledge of the report's unique identifier to exploit this vulnerability. Fixes have been released, with version 9.0.20.238 addressing the issue for branch 9.0.20, and version 9.0.21.201 handling it for branch 9.0.21.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.