CVE-2018-1182 — Improper Privilege Management in RSA Identity Governance AND Lifecycle

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 82.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
EMC RSA Identity Governance AND LifecycleEMC RSA Identity Management AND GovernanceRSA VIA Lifecycle AND Governance
Timeline
PublishedMar 8
Latest updateMay 13

Description

An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts wi…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-rjrw-f92f-5h9w: An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7↗2022-05-13
▶
CVEList
CVE-2018-1182: An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7↗2018-03-08
▶
CVE-2018-1182 — Improper Privilege Management | cvebase