Threats tagged 'ghsa-w7v2-jfcq-2jh7'

An improper authorization vulnerability exists in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. This flaw allows authenticated users to access or modify attachment resources belonging to other users without proper permission checks. The vulnerability has a medium severity rating with a CVSS 4.0 base score of 5.3.