CVE-2019-3760mediumCWE-20

CVE-2019-3760: falha de média gravidade em Dell RSA Identity Governance and Lifecycle

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar RSA Identity Governance and Lifecycle+ Monitorar RSA Via Lifecycle and Governance

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.4epss 1.2%
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the data by supplying specially crafted input data to the affected application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Produtos afetados
Dell · RSA Identity Governance and LifecycleDell · RSA Via Lifecycle and Governance
CVEs relacionadas — Dell RSA Identity Governance and Lifecycle

No mesmo produto, das mais perigosas para as menos.

CVE-2019-3759MEDIUMCVE-2019-3759EPSS 3.2%CVE-2019-3761MEDIUMCVE-2019-3761EPSS 0.8%CVE-2019-3763HIGHCVE-2019-3763EPSS 0.3%