CVE-2018-1182

Published: Mar 8, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts with root level privileges.

Affected (5)

Products: Emc: Rsa Identity Governance And Lifecycle, Rsa Identity Management And Governance · Rsa: Rsa Via Lifecycle And Governance

Emc

2 products

Rsa Identity Governance And Lifecycle

Rsa Identity Management And Governance

Rsa

1 product

Rsa Via Lifecycle And Governance

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Emc Rsa Identity Governance And Lifecycle	Version 7.0.1
Emc Rsa Identity Governance And Lifecycle	Version 7.0.2
Emc Rsa Identity Management And Governance	Version 6.9.0
Emc Rsa Identity Management And Governance	Version 6.9.1
Rsa Rsa Via Lifecycle And Governance	Version 7.0