Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2026-10540

Weak password hash protection in Control-M/Entreprise Manager

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
airbus

Description

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentially earlier unsupported versions

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BMC Control-M/Enterprise Manager

Default version status: affected

  • 9.0.21unaffected
  • 9.0.20 to < 9.0.21affected

References