Bmc Helix Network Management
Monthly
Unauthenticated attackers can bypass authentication on BMC Helix Network Management on-prem deployments (versions before 26.3.01) when SAML single sign-on is configured, logging in as the local administrator with any password to obtain a SuperAdmin session. This flaw allows modification of device credentials, execution of device commands, and alteration of audit records. No public exploit code has been identified at time of analysis, but the vulnerability is remotely exploitable without authentication and requires only that the SAML SSO feature be enabled.
Unauthenticated attackers can bypass authentication on BMC Helix Network Management on-prem deployments (versions before 26.3.01) when SAML single sign-on is configured, logging in as the local administrator with any password to obtain a SuperAdmin session. This flaw allows modification of device credentials, execution of device commands, and alteration of audit records. No public exploit code has been identified at time of analysis, but the vulnerability is remotely exploitable without authentication and requires only that the SAML SSO feature be enabled.