CVE-2015-5072

MEDIUM

BMC Remedy AR System Server - Authenticated Arbitrary File Read via BIRT Engine __imageid Parameter

Title source: llm

Description

The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the __imageid parameter.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://communities.bmc.com/docs/DOC-77816

Third Party Advisory, VDB Entry x_refsource_misc

https://packetstormsecurity.com/files/133689/BMC-Remedy-AR-8.1-9.0-File-Inclusion.html

Scores

CVSS v3 6.5

EPSS 0.0168

EPSS Percentile 74.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-269

Status published

Products (2)

bmc/remedy_ar_system_server 8.0

bmc/remedy_ar_system_server 9.0

Published Jan 15, 2020

Tracked Since Feb 18, 2026