CVE-2025-55111: bmc control-m/agent

csirt@kutim:~/threat-intel/cve/CVE-2025-55111

CVSS 5.5 · Medium EPSS 0,13%

Kerentanan Incorrect Default Permissions pada bmc control-m/agent. Skor CVSS 3.1 5.5 (Medium) menurut airbus.com.

Deskripsi (NVD)

Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions as well as in newer versions which were upgraded from an affected version. These files contain keys and passwords relating to SSL files, keystore and policies. An attacker with local access to the system running the Agent can access these files.

Rincian

Terbit di NVD: 16 September 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.5 (Medium), sumber airbus.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-276: Incorrect Default Permissions
EPSS (30 hari): 0,13% peluang dieksploitasi; lebih tinggi dari 2,3% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
bmc	control-m/agent	Semua versi sebelum 9.0.21

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441965 advisory vendor
https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.