CVE-2016-6599
Critical · 9.8CVSS
9.8
EPSS
12.3%
Published
Jan 30, 2018
CISA due date
—
The record
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the domain administrator username and password. These are encrypted with a fixed key and IV ("NumaraIT") using the DES algorithm. The domain administrator username and password can only be obtained if the Self-Service component is enabled, which is the most common scenario in enterprise deployments.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19750 A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. CWE-255
- CVE-2026-11552 A vulnerability has been found in SourceCodester Onlne Examination & Learning Management… CWE-255
- CVE-2026-11515 A vulnerability has been found in SourceCodester Barangay Resident Profiling and… CWE-255
- CVE-2026-6597 A weakness has been identified in langflow-ai langflow up to 1.8.3. CWE-255
- CVE-2026-4251 A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. CWE-255
- CVE-2026-4250 A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to… CWE-255
- CVE-2026-4242 A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0… CWE-255
- CVE-2026-4243 A weakness has been identified in La Nacion App 10.2.25 on Android. CWE-255