Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2025-55110

BMC Control-M/Agent hardcoded default keystore password

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
airbus

Description

Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented. An attacker with read access to the keystore could access sensitive data using this password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BMC Control-M/Agent

Default version status: affected

  • 9.0.22affected
  • 9.0.21affected
  • 9.0.20affected
  • 9.0.19affected
  • 9.0.18affected

References