Lucene search

DellCVELIST:CVE-2019-3724

HistoryMay 15, 2019 - 3:45 p.m.

CVE-2019-3724 Authorization Bypass VulnerabilityRSA Netwitness Platform

2019-05-1515:45:11

dell

www.cve.org

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

8.6

Confidence

High

EPSS

0.005

Percentile

75.7%

JSON

RSA Netwitness Platform versions prior to 11.2.1.1 is vulnerable to an Authorization Bypass vulnerability. A remote low privileged attacker could potentially exploit this vulnerability to gain access to administrative information including credentials.

CNA Affected

[
  {
    "product": "RSA Netwitness Platform",
    "vendor": "RSA",
    "versions": [
      {
        "lessThanOrEqual": "11.2.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

community.rsa.com/docs/DOC-104202

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

8.6

Confidence

High

EPSS

0.005

Percentile

75.7%

JSON

Related for CVELIST:CVE-2019-3724