CVE-2017-13130
HIGHBMC Patrol - Uncontrolled Search Path
Title source: ruleDescription
mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.
Scores
CVSS v3
7.8
EPSS
0.0024
EPSS Percentile
46.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
draft
Affected Products (1)
bmc/patrol
Timeline
Published
Aug 23, 2017
Tracked Since
Feb 18, 2026