Threats tagged 'ghsa-w2gx-x7ww-hgvm'

BMC Helix Network Management on-premises versions 26.3.00 prior to 26.3.01 contain a critical authentication bypass vulnerability. When SAML single sign-on is configured, unauthenticated attackers can log in as the local administrator using any password. This allows attackers to gain SuperAdmin privileges, enabling them to modify device credentials, execute device commands, and alter audit records.