CVE-2016-2349 : Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows at

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password.

Published 2016-12-21 22:59:00

Updated 2025-04-12 10:46:41

Source CERT/CC

View at NVD, CVE.org

Products affected by CVE-2016-2349

BMC » Remedy Action Request System » Version: 9.1
cpe:2.3:a:bmc:remedy_action_request_system:9.1:*:*:*:*:*:*:*
Matching versions
BMC » Remedy Action Request System » Version: 9.0 Update SP1
cpe:2.3:a:bmc:remedy_action_request_system:9.0:sp1:*:*:*:*:*:*
Matching versions
BMC » Remedy Action Request System » Version: 9.0
cpe:2.3:a:bmc:remedy_action_request_system:9.0:*:*:*:*:*:*:*
Matching versions
BMC » Remedy Action Request System » Version: 8.1 Update SP2
cpe:2.3:a:bmc:remedy_action_request_system:8.1:sp2:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 43 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

CWE-640 Weak Password Recovery Mechanism for Forgotten Password

The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.

Assigned by: nvd@nist.gov (Primary)

http://www.securitytracker.com/id/1037529

BMC Remedy Action Request System Password Reset Flaw Lets Remote Users Modify Passwords on the Target System - SecurityTracker
https://bmcsites.force.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000l6kbCAA&type=Solution

CVE-2016-2349 - Reset password functionality can be manipulated to accept a blank previous password and reset the password
Mitigation;Vendor Advisory
http://www.securityfocus.com/bid/95075

BMC Remedy Action Request System CVE-2016-2349 Password Reset Security Bypass Vulnerability

Jump to