CVE-2016-0918

Опубликовано: 24 сент. 2016

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.

Ссылки

http://seclists.org/bugtraq/2016/Sep/52
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/93108
http://www.securitytracker.com/id/1036896
http://seclists.org/bugtraq/2016/Sep/52
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/93108
http://www.securitytracker.com/id/1036896

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:rsa_identity_management_and_governance:*:*:*:*:*:*:*:*

Версия до 6.8.1 (включая)

cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.0:*:*:*:*:*:*:*

cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1:*:*:*:*:*:*:*

cpe:2.3:a:emc:rsa_via_lifecycle_and_governance:*:*:*:*:*:*:*:*

Версия до 7.0.0 (включая)

EPSS

Процентиль: 39%

0.00171

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-rj7j-4622-7jvj