Threats tagged 'ghsa-5f3v-98mr-rwxx'

A path traversal vulnerability exists in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. This flaw allows authenticated administrators to read files outside the intended directory, potentially exposing sensitive information. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. No public exploits or known active exploitation have been reported. No patch or official remediation details are provided in the available data.