Security BMC TrackIt! 11.3 Unauthenticated Local User Password Change December 11, 2014 007admin Leave a comment BMC TrackIt! version 11.3 suffers from an unauthenticated local user password change vulnerability.