Description
Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented.
An attacker with read access to the keystore could access sensitive data using this password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BMC | Control-M/Agent | 9.0.22, 9.0.21, 9.0.20, 9.0.19, 9.0.18 | — |