CVE-2018-11049

RSA Identity Governance and Lifecycle Uncontrolled Search Path Vulnerability

published July 11, 2018

CVSS
—
EPSS
0%
Percentile
37.4
In the wild
Unconfirmed
What it is

RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scripts set an environment variable in an unintended manner. A local authenticated malicious user could trick the root user to run malicious code on the targeted system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.4th percentile
Published
2018-07-11T20:00Z
EPSS history
Timeline
  • 11 JUL 20:00Z
    RSA Identity Governance and Lifecycle Uncontrolled Search Path Vulnerability
    cvelistv5