7.8
CVE-2018-1182
- EPSS 0.42%
- Veröffentlicht 08.03.2018 15:29:00
- Zuletzt bearbeitet 21.11.2024 03:59:21
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
LoginAn issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts with root level privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emc ≫ Rsa Identity Governance And Lifecycle Version7.0.1
Emc ≫ Rsa Identity Governance And Lifecycle Version7.0.2
Emc ≫ Rsa Identity Management And Governance Version6.9.0
Emc ≫ Rsa Identity Management And Governance Version6.9.1
Rsa ≫ Rsa Via Lifecycle And Governance Version7.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.42% | 0.338 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
http://seclists.org/fulldisclosure/2018/Mar/16
http://www.securityfocus.com/bid/103317
http://www.securitytracker.com/id/1040458