CNNVD-202511-430 Information

CNNVD ID

CNNVD-202511-430

CVE-2025-55108

  • CNNVD Published: 2025-11-05

Description (Chinese)

BMC Control-M/Agent是美国BMC公司的一个工作负载自动化系统。 BMC Control-M/Agent存在安全漏洞,该漏洞源于未启用相互SSL/TLS身份验证,可能导致未经验证的远程代码执行、任意文件读写和类似未授权操作。

Description (English)

BMC Control-M/Agent is a working load automation system for BMC in the United States. BMC Control-M/Agent has a security loophole, which stems from the failure to enable mutual SSL/TLS authentication, which may result in uncertified remote code execution, random document reading and writing and similar unauthorized operations.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

BMC

Published

2025-11-05

Last Modified

2026-02-24

References

https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442271 https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441962 https://access.redhat.com/security/cve/cve-2025-55108

Share on: