CVE-2018-11049

Published: Jul 11, 2018Modified: Nov 21, 2024

7.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: NVD

Description

RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scripts set an environment variable in an unintended manner. A local authenticated malicious user could trick the root user to run malicious code on the targeted system.

Affected (4)

Products: Emc: Rsa Identity Governance And Lifecycle, Rsa Identity Management And Governance · Rsa: Rsa Via Lifecycle And Governance

Emc

2 products

Rsa Identity Governance And Lifecycle

Rsa Identity Management And Governance

Rsa

1 product

Rsa Via Lifecycle And Governance

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Emc Rsa Identity Governance And Lifecycle	Version 7.1.0
Emc Rsa Identity Management And Governance	Version 6.9.0
Emc Rsa Identity Management And Governance	Version 6.9.1
Rsa Rsa Via Lifecycle And Governance	Version 7.0