2 lines
9.7 KiB
JSON
2 lines
9.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"RSA Identity Governance and Lifecycle","vendor":"Dell","versions":[{"lessThan":"7.1.1 P02","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"7.1.0 P08","status":"affected","version":"unspecified","versionType":"custom"},{"status":"affected","version":"7.0.2"},{"status":"affected","version":"7.0.1"}]},{"product":"RSA Via Lifecycle and Governance","vendor":"Dell","versions":[{"status":"affected","version":"7.0"}]}],"source":"security_alert@emc.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.1:-:*:*:*:*:*:*","matchCriteriaId":"44CA4907-A783-46E1-8B46-E17D48969AD9","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.1:p1:*:*:*:*:*:*","matchCriteriaId":"052C1A07-3FB4-42A6-97E0-5FEC8F8F4C66","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.1:p2_hotfix2:*:*:*:*:*:*","matchCriteriaId":"9F14DC98-ACE2-4881-A56E-DC65F4BD6EF0","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.1:p3:*:*:*:*:*:*","matchCriteriaId":"01B41090-3B78-47DE-938D-54286A0113AB","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.1:p4:*:*:*:*:*:*","matchCriteriaId":"014C5B9E-AE6F-49B6-9B99-C788B06210A2","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.1:p5:*:*:*:*:*:*","matchCriteriaId":"B229032D-521D-42C7-A713-841549A732A8","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.1:p5_hotfix2:*:*:*:*:*:*","matchCriteriaId":"1C4BDB3E-AFDD-4CBC-99D9-702BCBC3CC10","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:-:*:*:*:*:*:*","matchCriteriaId":"BB614915-FEB0-40BA-B937-A94A2BC32EA4","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p1:*:*:*:*:*:*","matchCriteriaId":"F9FB2F5C-689B-421E-8419-E854F589016E","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p10:*:*:*:*:*:*","matchCriteriaId":"7C261380-E92D-4CB5-8AEE-753C72C24616","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p11:*:*:*:*:*:*","matchCriteriaId":"0338F8EE-0C27-4321-912D-B27B599EC995","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p12:*:*:*:*:*:*","matchCriteriaId":"7CAE5789-2829-4235-9B88-DD56CBE9FE90","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p13:*:*:*:*:*:*","matchCriteriaId":"06EFC55E-26A0-43DB-A810-F478686CDDA9","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p14:*:*:*:*:*:*","matchCriteriaId":"B75C0122-F2BD-44EE-AB23-4C3710916449","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p2:*:*:*:*:*:*","matchCriteriaId":"8CEB0CCE-3641-4FB5-9A36-3D3F4554B128","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p3:*:*:*:*:*:*","matchCriteriaId":"F3D8E30F-B267-4A78-A0BC-FB42A5CA623B","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p4:*:*:*:*:*:*","matchCriteriaId":"67E2D018-FEB3-4F42-808D-D0B3AADFC7C5","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p5:*:*:*:*:*:*","matchCriteriaId":"055DDA5C-F433-447A-B017-FE9A14FEFA4A","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p6:*:*:*:*:*:*","matchCriteriaId":"A0E3EF7B-D9F7-442C-B344-21BD031ADE4D","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p7:*:*:*:*:*:*","matchCriteriaId":"C98D1027-D86A-4EFB-B440-D198D22219E1","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p8:*:*:*:*:*:*","matchCriteriaId":"79343DD1-5BC0-4E4B-882A-CEBB9716EED3","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p9:*:*:*:*:*:*","matchCriteriaId":"A7CF1FAC-F88B-487F-872C-5912C19AB1DA","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.0:-:*:*:*:*:*:*","matchCriteriaId":"BC3F7997-46CC-4345-981A-4CA38A73BA8C","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.0:p01:*:*:*:*:*:*","matchCriteriaId":"DD36DED8-5591-4A76-AD40-7DAED6EF1954","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.0:p02:*:*:*:*:*:*","matchCriteriaId":"6CF203FD-8A59-4237-820A-FDBE4F28E4B9","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.0:p03:*:*:*:*:*:*","matchCriteriaId":"08FC40D4-433A-4EDE-87B1-422D0473D6D8","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.0:p04:*:*:*:*:*:*","matchCriteriaId":"5CF1C39E-D12B-44E4-8172-CD91F17E871B","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.0:p05:*:*:*:*:*:*","matchCriteriaId":"31DCF79D-E1EA-4F65-B355-C821B0D78E73","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.0:p06:*:*:*:*:*:*","matchCriteriaId":"82CFC850-4C98-42B5-AE77-592FD64E78E1","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.0:p07:*:*:*:*:*:*","matchCriteriaId":"9DE35E51-0C69-41A8-9332-A9E411CE0B92","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.1:-:*:*:*:*:*:*","matchCriteriaId":"6E9E1900-FE59-440A-87D6-35DE7233EAB3","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.1.1:p1:*:*:*:*:*:*","matchCriteriaId":"929D3EE3-00B4-485C-AB3F-DA04FF91C7FE","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_via_lifecycle_and_governance:7.0.0:-:*:*:*:*:*:*","matchCriteriaId":"3D2D40A1-3C94-4550-9085-9F9369332BE6","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_via_lifecycle_and_governance:7.0.0:p1:*:*:*:*:*:*","matchCriteriaId":"91BBA4D3-680B-4915-954E-1E92D1567014","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_via_lifecycle_and_governance:7.0.0:p2:*:*:*:*:*:*","matchCriteriaId":"516C78B3-D8F9-4750-94BB-9C20674C2528","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_via_lifecycle_and_governance:7.0.0:p3:*:*:*:*:*:*","matchCriteriaId":"59D6612B-3400-43EC-9EAA-D6451A7BBD63","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_via_lifecycle_and_governance:7.0.0:p4:*:*:*:*:*:*","matchCriteriaId":"32D04EBE-8F30-48EA-B3BF-CFCF5910679E","vulnerable":true},{"criteria":"cpe:2.3:a:dell:rsa_via_lifecycle_and_governance:7.0.0:p5:*:*:*:*:*:*","matchCriteriaId":"ABF6EBBB-4460-451F-B7A2-AC5C6E0DB4D9","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a code injection vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to run custom Groovy scripts to gain limited access to view or modify information on the Workflow system."},{"lang":"es","value":"El software RSA Identity Governance and Lifecycle y los productos RSA Via Lifecycle and Governance versiones anteriores a 7.1.0 P08, contienen una vulnerabilidad de inyección de código. Un usuario malicioso autenticado remoto podría explotar potencialmente esta vulnerabilidad para ejecutar scripts Groovy personalizados para conseguir acceso limitado para visualizar o modificar información en el sistema Workflow."}],"id":"CVE-2019-3759","lastModified":"2026-06-17T02:35:32.420","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":5.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"security_alert@emc.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-09-11T20:15:11.410","references":[{"source":"security_alert@emc.com","url":"http://packetstormsecurity.com/files/158324/RSA-IG-L-Aveksa-7.1.1-Remote-Code-Execution.html"},{"source":"security_alert@emc.com","url":"https://community.rsa.com/docs/DOC-106943"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://packetstormsecurity.com/files/158324/RSA-IG-L-Aveksa-7.1.1-Remote-Code-Execution.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://community.rsa.com/docs/DOC-106943"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"security_alert@emc.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-94"}],"source":"nvd@nist.gov","type":"Primary"}]}
|