by Kastro
Paper/Archive/CVE-2025-71257

CVE-2025-71257

BMC Software, Inc. FootPrints — BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass

EPSS 45%public exploitCVSS 9.1
critical.is priorityof 100
57
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 98.8.988 × 2019.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets. Unauthenticated remote attackers can bypass access controls to invoke restricted functionality and gain unauthorized access to application data and modify system resources. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.

Affected

ProductAffectedFixed inSource
FootPrints20.20.02 – 20.24.01.001–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
VulnCheck (CNA)7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
VulnCheck (CNA)6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

patchdocs.bmc.com/xwiki/bin/view/More-Products/Footprints/FootPrints/fp2024/Release-notes/2024-Release-01-Patch-2exploitlabs.watchtowr.com/thanks-itsms-threat-actors-have-never-been-so-organized-bmc-footprints-pre-auth-remote-code-execution-chainswriteupvulncheck.com/advisories/bmc-footprints-itsm-authentication-bypass