CVE-2018-18862: BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM for...

Security readout for executives and security teams

This CVE describes an access-control weakness in BMC Remedy Mid-Tier for BMC Remedy AR System. Certain ITAM and administration views may expose configuration or server information to users who should not see it. Public scoring and fix details are incomplete in the provided sources. Exposure is most likely where BMC Remedy Mid-Tier 7.1.00 or 9.1.02.003 is deployed with ITAM forms or AR System administration views reachable by broad user groups or from untrusted networks. Treat this as a targeted exposure-reduction item for any Remedy environment. Prioritize internet-facing or broadly accessible Remedy Mid-Tier systems, because leaked configuration or server details can support later intrusion activity. Mitigation focus: Check BMC guidance and release notes for corrected versions or configuration changes.; Restrict Remedy Mid-Tier access to trusted networks, VPN, or approved users.; Review role permissions for ITAM and AR System administration views..

Prepared

Jun 6, 2026, 21:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.