CVE-2007-0310: Bmc Remedy Action Request System

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names.

Affected products

• Bmc Remedy Action Request System: version 5.01.02_patch_1267 only

Published 2007-01-18. Last modified 2026-06-16.