CVE-2025-55111 BMC Control-M/Agent insecure default file permissions
Local attackers can read sensitive SSL keys and passwords due to insecure default file permissions in BMC Control-M/Agent.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-55111?
CVE-2025-55111 is a medium-severity vulnerability in BMC Control-M/Agent, published on 16 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions as well as in newer versions which were upgraded from an affected version. These files contain keys and passwords relating to SSL files, keystore and policies. An attacker with local access to the system running the Agent can access these files.
Weakness: CWE-276
Which versions are affected by CVE-2025-55111?
It affects 1 product.
Products include Bmc Control-M\/Agent.
How do I fix CVE-2025-55111?
No fix has been published for CVE-2025-55111 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-55111 being exploited?
There is no known exploitation of CVE-2025-55111 in the wild and no public exploit code.
Other vulnerabilities in BMC Control-M/Agent
- CVE-2025-55109 BMC Control-M/Agent default SSL/TLS configuration authenticated bypass
- CVE-2025-55113 BMC Control-M/Agent unescaped NULL byte in access control list checks
- CVE-2025-55115 BMC Control-M/Agent path traversal local privilege escalation
- CVE-2025-55116 BMC Control-M/Agent buffer overflow local privilege escalation
- CVE-2025-55112 BMC Control-M/Agent hardcoded Blowfish keys
Sources
Also known as GHSA-xxwc-hg26-q85m.