Bmc Patrol vulnerabilities

3 CVEs affecting Bmc Patrol, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-34258, published 2023-05-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-34258, published 2023-05-31. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key.…
CVE-2016-9638, published 2016-12-02. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable.…
CVE-2017-13130, published 2017-08-23. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .:…