CVE-2019-3759
11.09.2019, 20:15
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a code injection vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to run custom Groovy scripts to gain limited access to view or modify information on the Workflow system.
| Vendor | Product | Version |
|---|---|---|
| dell | rsa_identity_governance_and_lifecycle | 7.0.1 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.1:p1 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.1:p2_hotfix2 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.1:p3 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.1:p4 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.1:p5 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.1:p5_hotfix2 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p1 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p10 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p11 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p12 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p13 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p14 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p2 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p3 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p4 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p5 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p6 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p7 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p8 |
| dell | rsa_identity_governance_and_lifecycle | 7.0.2:p9 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.0 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.0:p01 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.0:p02 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.0:p03 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.0:p04 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.0:p05 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.0:p06 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.0:p07 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.1 |
| dell | rsa_identity_governance_and_lifecycle | 7.1.1:p1 |
| dell | rsa_via_lifecycle_and_governance | 7.0.0 |
| dell | rsa_via_lifecycle_and_governance | 7.0.0:p1 |
| dell | rsa_via_lifecycle_and_governance | 7.0.0:p2 |
| dell | rsa_via_lifecycle_and_governance | 7.0.0:p3 |
| dell | rsa_via_lifecycle_and_governance | 7.0.0:p4 |
| dell | rsa_via_lifecycle_and_governance | 7.0.0:p5 |
𝑥
= Vulnerable software versions