CVE-2014-8270: Bmc Track-It!

Medium severity, CVSS 5.0. EPSS: 19.9% chance of exploitation in the next 30 days.

BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset.

Affected products

• Bmc Track-It!: version 11.3 only

Published 2014-12-12. Last modified 2026-06-17.