BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Track-it! | Bmc | 11.3 (including) | 11.3 (including) |