Medium
5.3
Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite...
CVE-2026-113694
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| BMC | BMC IT Service Management Suite | — | — |
Original description The description as published by the source.
Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to access or modify attachment resources belonging to other users.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web github.com
- web docs.helixops.ai
- web docs.helixops.ai
- web docs.helixops.ai
- web nvd.nist.gov
- web docs.helixops.ai
- web docs.helixops.ai
- web docs.helixops.ai
- web github.com