CVE-2019-18572
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.3epss 2.0%
probabilidade de exploração
2.0%top 21% das CVEs
exploração observada
nãonenhuma fonte reporta
The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can connect to the JMX agent and monitor and manage the Java application.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Produtos afetados
Dell · RSA Identity Governance & LifecycleReferências
https://community.rsa.com/docs/DOC-109310