HIGH🇵🇱 Wersja polska

CVE-2018-1182

CVSS 7.8v3.0pub. 2018-03-08upd. 2024-11-21

An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts with root level privileges.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Emc Rsa Identity Governance And Lifecycle

    APP
    Emc
    7.0.17.0.2

  • Emc Rsa Identity Management And Governance

    APP
    Emc
    6.9.06.9.1

  • Rsa Via Lifecycle And Governance

    APP
    Rsa
    7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-1245CRITICAL9.0ten sam produkt

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnera...

CVE-2018-11049HIGH7.3ten sam produkt

RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontro...

CVE-2017-8004HIGH7.2ten sam produkt

The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Iden...

CVE-2015-0532HIGH7.5ten sam produkt

EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restric...

CVE-2014-4619HIGH9.3ten sam produkt

EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x befor...