PT-2017-16260 · Rsa+1 · Rsa Via Lifecycle/Governance+2

Published 2017-06-09 · Updated 2022-04-29 · CVE-2017-5004

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA Identity Governance and Lifecycle versions 7.0.1 through 7.0.2 RSA Via Lifecycle and Governance version 7.0 RSA Identity Management and Governance (IMG) version 6.9.1

Description The issue is related to Stored Cross Site Scripting, which could potentially be exploited by malicious users to compromise an affected system.

Recommendations For EMC RSA Identity Governance and Lifecycle versions 7.0.1 through 7.0.2, update to a version that includes the fix for the Stored Cross Site Scripting issue. For RSA Via Lifecycle and Governance version 7.0, update to a version that includes the fix for the Stored Cross Site Scripting issue. For RSA Identity Management and Governance (IMG) version 6.9.1, update to a version that includes the fix for the Stored Cross Site Scripting issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-5004

Affected Products

Rsa Identity Governance/Lifecycle

Rsa Identity Management/Governance

Rsa Via Lifecycle/Governance

References · 6

• https://osv.dev/vulnerability/CVE-2017-5004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5004 · Security Note
• http://securityfocus.com/bid/98968 · Note
• http://securitytracker.com/id/1038648 · Note
• http://securityfocus.com/archive/1/540693/30/0/threaded · Note
• https://web.archive.org/web/20210116013250/http://securityfocus.com/archive/1/540693/30/0/threaded · Note