CVE-2016-0918 — Sensitive Information Exposure in RSA Identity Management AND Governance

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 61.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
EMC RSA Identity Management AND GovernanceEMC RSA VIA Lifecycle AND Governance
Timeline
PublishedSep 24
Latest updateMay 17

Description

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-rj7j-4622-7jvj: EMC RSA Identity Management and Governance before 6↗2022-05-17
▶
CVEList
CVE-2016-0918: EMC RSA Identity Management and Governance before 6↗2016-09-24
▶
CVE-2016-0918 — Sensitive Information Exposure | cvebase