CVE-2017-18228 : Security Advisory and Response

BMC Remedy AR System 9.1 is susceptible to a Cross-Site Scripting (XSS) vulnerability through the ATTKey parameter in an arsys/servlet/AttachServlet request.

Understanding CVE-2017-18228

This CVE entry describes a security issue in BMC Remedy AR System 9.1 that could potentially allow an attacker to execute XSS attacks.

What is CVE-2017-18228?

The ATTKey parameter in the arsys/servlet/AttachServlet request in BMC Remedy AR System 9.1 can be manipulated by an attacker to inject malicious scripts, leading to XSS vulnerabilities.

The Impact of CVE-2017-18228

Exploitation of this vulnerability could result in unauthorized access to sensitive data, session hijacking, and potential compromise of user information.

Technical Details of CVE-2017-18228

This section provides more in-depth technical information about the vulnerability.

Vulnerability Description

The vulnerability exists in Remedy Mid Tier in BMC Remedy AR System 9.1, allowing attackers to conduct XSS attacks via the ATTKey parameter in the arsys/servlet/AttachServlet request.

Affected Systems and Versions

Product: BMC Remedy AR System 9.1
Version: Not applicable

Exploitation Mechanism

Attackers can exploit the vulnerability by injecting malicious scripts through the ATTKey parameter in specific requests, potentially leading to XSS attacks.

Mitigation and Prevention

Protecting systems from CVE-2017-18228 requires immediate actions and long-term security practices.

Immediate Steps to Take

Apply security patches provided by BMC to address the vulnerability promptly.
Monitor and filter user inputs to prevent malicious script injections.
Educate users on safe browsing practices to mitigate the risk of XSS attacks.

Long-Term Security Practices

Conduct regular security assessments and penetration testing to identify and address vulnerabilities proactively.
Implement web application firewalls (WAFs) to filter and block malicious traffic targeting XSS vulnerabilities.

Patching and Updates

Regularly update and patch BMC Remedy AR System 9.1 to ensure that known vulnerabilities, including CVE-2017-18228, are mitigated effectively.