CVE-2019-8352

9.8 criticalEPSS 6.3%

Critical (9.8) in bmc patrol agent. EPSS 6.3% chance of exploitation in the next 30 days.

By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use them to execute code or escalate privileges on the network.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2019-05-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bmc:patrol_agent

References

https://www.securifera.com/advisories/CVE-2019-8352/
https://www.securifera.com/advisories/CVE-2019-8352/

Check your stack JSON