Track-It! vulnerabilities

2 known vulnerabilities in Track-It! from BMC. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Track-It!: Missing Authentication for Critical Functionality

  CVE-2022-35865Aug 3, 2022BMCEPSS 1.97%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The i

• 9.8 Critical severity

  Track-It!: Improper Authentication

  CVE-2022-24047Feb 18, 2022BMCEPSS 1.9%

  This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The i