Description
Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to access or modify attachment resources belonging to other users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BMC | BMC IT Service Management Suite | 25.3.01, 25.4.01, 26.1.01 | 25.3.01 hotfix 10 |