CVE-2018-1182: An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle…

PriorityP341high7.8CVSS 3.0

AVLACLPRLUINSUCHIHAH

EPSS

0.42%

34.0th percentile

An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts with root level privileges.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
emc	rsa_identity_governance_and_lifecycle	—	—
emc	rsa_identity_governance_and_lifecycle	—	—
emc	rsa_identity_management_and_governance	—	—
emc	rsa_identity_management_and_governance	—	—
rsa	rsa_via_lifecycle_and_governance	—	—

CVSS provenance

nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.