PT-2017-16259 · Rsa+1 · Rsa Via Lifecycle/Governance+2

Publicado 2017-06-09 · Atualizado 2022-04-29 · CVE-2017-5003

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA Identity Governance and Lifecycle versions 7.0.1 through 7.0.2 RSA Via Lifecycle and Governance version 7.0 RSA Identity Management and Governance (IMG) version 6.9.1

Description The issue is related to Reflected Cross Site Scripting, which could potentially be exploited by malicious users to compromise an affected system.

Recommendations For EMC RSA Identity Governance and Lifecycle versions 7.0.1 and 7.0.2, update to a version that includes the fix for the Reflected Cross Site Scripting vulnerability. For RSA Via Lifecycle and Governance version 7.0, update to a version that includes the fix for the Reflected Cross Site Scripting vulnerability. For RSA Identity Management and Governance (IMG) version 6.9.1, update to a version that includes the fix for the Reflected Cross Site Scripting vulnerability.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-5003

Produtos afetados

Rsa Identity Governance/Lifecycle

Rsa Identity Management/Governance

Rsa Via Lifecycle/Governance

Referências · 7

• https://t.me/cvenotify/18772 · Publicação no Telegram
• http://securitytracker.com/id/1038648 · Nota
• https://osv.dev/vulnerability/CVE-2017-5003 · Aviso do Fabricante
• http://securityfocus.com/archive/1/540693/30/0/threaded · Nota
• http://securityfocus.com/bid/98974 · Nota
• https://web.archive.org/web/20210116013250/http://securityfocus.com/archive/1/540693/30/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5003 · Nota de Segurança