CVE-2026-113696
CVE-2026-113696 · Improper Authorization in BMC ITSM SmartIT Change Approvals
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make unauthorized changes to approval state and bypass intended approval restrictions.
CVSS 5.3 · Moyenne · EPSS 0,4% · Correctif disponible
- Publication
- Mise à jour
Produits et versions concernés
bmc it service management suite
- Versions du logiciel
- 25.3.01: Concernée (custom)
- 25.3.01 hotfix 10: Non concernée (custom)
- 25.4.01: Concernée (custom)
- 25.4.01 hotfix 22: Non concernée (custom)
- 26.1.01: Concernée (custom)
- 26.1.01 hotfix 12: Non concernée (custom)
Mettez à jour vers 25.4.01 hotfix 22; Mettez à jour vers 26.1.01 hotfix 12
Sources originales
- https://github.com/NCSC-Assess/Advisories/blob/main/advisories/2026/CVE-2026-113696/advisory.md
- https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25301/Release-notes-and-notices/Known-and-corrected-issues/
- https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25401/Release-notes-and-notices/Known-and-corrected-issues/
- https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid26101/Release-notes-and-notices/Known-and-corrected-issues/
- https://nvd.nist.gov/vuln/detail/CVE-2026-113696