cbcvebase.
CVE-2017-8004
published 2017-07-17

CVE-2017-8004: The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1…

PriorityP345high7.2CVSS 3.0
AVNACLPRHUINSUCHIHAH
EPSS
2.15%
79.8th percentile
The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels) allow an application administrator to upload arbitrary files that may potentially contain a malicious code. The malicious file could be then executed on the affected system with the privileges of the user the application is running under.

Affected

37 ranges· showing 25
VendorProductVersion rangeFixed in
emcrsa_identity_governance_and_lifecycle——
emcrsa_identity_governance_and_lifecycle——
emcrsa_identity_governance_and_lifecycle——
emcrsa_identity_governance_and_lifecycle——
emcrsa_identity_governance_and_lifecycle——
emcrsa_identity_governance_and_lifecycle——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——
emcrsa_identity_management_and_governance——

CVSS provenance

nvdv3.07.2HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.