HIGH🇵🇱 Wersja polska

CVE-2018-1182

CVSS 7.8v3.0pub. 2018-03-08upd. 2024-11-21

An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts with root level privileges.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Emc Rsa Identity Governance And Lifecycle

    APP
    Emc
    7.0.17.0.2

  • Emc Rsa Identity Management And Governance

    APP
    Emc
    6.9.06.9.1

  • Rsa Via Lifecycle And Governance

    APP
    Rsa
    7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-1245CRITICAL9.0PL ✓same product

RSA Identity Lifecycle – bypass autoryzacji umożliwiający wykonanie poleceń OS

CVE-2018-11049HIGH7.3same product

RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontro...

CVE-2017-8004HIGH7.2same product

The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Iden...

CVE-2015-0532HIGH7.5same product

EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restric...

CVE-2014-4619HIGH9.3same product

EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x befor...