Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-0918

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.

Published

2016-09-24T10:59:00.137

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application emc rsa_identity_management_and_governance ≤ 6.8.1 Yes
Application emc rsa_identity_management_and_governance 6.9.0 Yes
Application emc rsa_identity_management_and_governance 6.9.1 Yes
Application emc rsa_via_lifecycle_and_governance ≤ 7.0.0 Yes
References