Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2016-6599 Details

Description

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the domain administrator username and password. These are encrypted with a fixed key and IV ("NumaraIT") using the DES algorithm. The domain administrator username and password can only be obtained if the Self-Service component is enabled, which is the most common scenario in enterprise deployments.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://packetstormsecurity.com/files/146110/BMC-Track-It-11.4-Code-Execution-Information-Disclosure.html	CVE	ExploitThird Party AdvisoryVDB Entry
https://communities.bmc.com/community/bmcdn/bmc_track-it/blog/2016/01/04/track-it-security-advisory-24-dec-2015	CVE	Vendor Advisory
http://seclists.org/fulldisclosure/2018/Jan/92	CVE	ExploitMailing ListTechnical DescriptionThird Party Advisory
https://github.com/pedrib/PoC/blob/master/advisories/bmc-track-it-11.4.txt	CVE	ExploitThird Party Advisory
http://packetstormsecurity.com/files/146110/BMC-Track-It-11.4-Code-Execution-Information-Disclosure.html	[email protected]	ExploitThird Party AdvisoryVDB Entry
https://communities.bmc.com/community/bmcdn/bmc_track-it/blog/2016/01/04/track-it-security-advisory-24-dec-2015	[email protected]	Vendor Advisory
http://seclists.org/fulldisclosure/2018/Jan/92	[email protected]	ExploitMailing ListTechnical DescriptionThird Party Advisory
https://github.com/pedrib/PoC/blob/master/advisories/bmc-track-it-11.4.txt	[email protected]	ExploitThird Party Advisory

see all 8 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-255	Credentials Management Errors	[email protected]

Affected Products

Product	Versions
bmc track-it!	<= 11.4 11.4 hf1 11.4 hf2
CPE cpe:2.3:a:bmc:track-it!:::::::: cpe:2.3:a:bmc:track-it!:11.4:hf1:::::: cpe:2.3:a:bmc:track-it!:11.4:hf2:::::: Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 26, 2018	Initial Analysis	[email protected]