Lucene search

[email protected]CVE-2016-0918

HistorySep 24, 2016 - 10:59 a.m.

CVE-2016-0918

2016-09-2410:59:00

CWE-200

[email protected]

web.nvd.nist.gov

emc

rsa

identity management

governance

information disclosure

cve-2016-0918

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.3%

JSON

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.

Affected configurations

NVD

Node

emcrsa_identity_management_and_governanceRange≤6.8.1

emcrsa_identity_management_and_governanceMatch6.9.0

emcrsa_identity_management_and_governanceMatch6.9.1

emcrsa_via_lifecycle_and_governanceRange≤7.0.0

CPENameOperatorVersion
emc:rsa_identity_management_and_governanceemc rsa identity management and governancele6.8.1
emc:rsa_identity_management_and_governanceemc rsa identity management and governanceeq6.9.0
emc:rsa_identity_management_and_governanceemc rsa identity management and governanceeq6.9.1
emc:rsa_via_lifecycle_and_governanceemc rsa via lifecycle and governancele7.0.0

CPE	Name	Operator	Version
emc:rsa_identity_management_and_governance	emc rsa identity management and governance	le	6.8.1
emc:rsa_identity_management_and_governance	emc rsa identity management and governance	eq	6.9.0
emc:rsa_identity_management_and_governance	emc rsa identity management and governance	eq	6.9.1
emc:rsa_via_lifecycle_and_governance	emc rsa via lifecycle and governance	le	7.0.0

References

seclists.org/bugtraq/2016/Sep/52

www.securityfocus.com/bid/93108

www.securitytracker.com/id/1036896

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.3%

JSON

Related for CVE-2016-0918

cvelist1 prion1 nvd1