Threats tagged 'ghsa-26rw-pg2c-4rv7'

An improper authorization vulnerability exists in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. This flaw allows authenticated users to make unauthorized changes to the approval state, bypassing intended approval restrictions. The vulnerability has a medium severity rating with a CVSS score of 5.3. No public exploits or patches are currently documented.