CVE-2025-71257 in FootPrints
Summary
by MITRE • 03/19/2026
BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets. Unauthenticated remote attackers can bypass access controls to invoke restricted functionality and gain unauthorized access to application data and modify system resources. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 08/06/2026
The vulnerability identified as CVE-2025-71257 represents a critical authentication bypass flaw in BMC FootPrints ITSM versions ranging from 20.20.02 through 20.24.01.001. This security weakness stems from inadequate enforcement of security filters applied to restricted REST API endpoints and servlets within the application architecture. The flaw allows unauthenticated remote attackers to circumvent access controls and gain unauthorized access to sensitive application data while also enabling modification of system resources. The vulnerability's impact extends beyond simple data exposure as it fundamentally compromises the integrity and confidentiality controls that should protect enterprise IT service management systems.
From a technical perspective, the vulnerability manifests through improper validation and filtering mechanisms that should normally enforce authentication requirements before granting access to restricted functionality. This authentication bypass occurs at the application layer where REST API endpoints and servlets fail to properly verify caller credentials, creating pathways for malicious actors to invoke privileged operations without proper authorization. The flaw aligns with CWE-287 which addresses improper authentication vulnerabilities and represents a significant deviation from established security best practices for enterprise service management platforms. The vulnerability's exploitation potential is particularly concerning given that it affects multiple minor versions within the 20.20.x and 20.24.x release cycles, suggesting a systemic issue in the security implementation rather than an isolated incident.
The operational impact of this vulnerability is substantial for organizations utilizing affected BMC FootPrints ITSM versions, as it exposes critical IT service management infrastructure to unauthorized access. Attackers could potentially access sensitive configuration data, modify service requests, manipulate user permissions, and gain access to confidential business information stored within the system. The ability to modify system resources creates additional risk for service disruption and data integrity compromise, while unauthorized data access could lead to compliance violations and regulatory penalties. Organizations relying on these service management platforms for critical business operations face significant risk exposure, particularly in environments where IT service management systems contain sensitive operational data and control mechanisms.
The remediation strategy involves applying specific hotfixes to address the authentication bypass vulnerability across affected versions. The listed hotfixes including 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01 provide targeted fixes for the security filters and access control mechanisms that were insufficiently enforced. Organizations should prioritize applying these patches as part of their vulnerability management processes, particularly given that the vulnerability affects multiple versions within the supported release cycle. The remediation approach aligns with ATT&CK technique T1078 which covers valid accounts and legitimate credentials for maintaining access, as the vulnerability essentially allows attackers to bypass authentication requirements that should normally prevent unauthorized access to system resources. Security teams should conduct thorough testing of patched environments to ensure that the hotfixes do not introduce regressions while also monitoring for any potential exploitation attempts during the patch deployment process.