Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance Cross-Site Scripting Vulnerabilities (CNVD-2020-03161)

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance are a suite of authentication and lifecycle management solutions from Dell, USA. A cross-site scripting vulnerability exists in Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance versions...

CVE-2019-18573

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious local user could potentially exploit this vulnerability as the session token is exposed as part of the URL. A remote...

CVE-2019-18573

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious local user could potentially exploit this vulnerability as the session token is exposed as part of the URL. A remote...

CVE-2019-18571

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

CVE-2019-18571

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

CVE-2019-18572

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can...

CVE-2019-18572

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can...

Cross site scripting

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

Session fixation

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious local user could potentially exploit this vulnerability as the session token is exposed as part of the URL. A remote...

Authentication flaw

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can...

CVE-2019-18573

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious local user could potentially exploit this vulnerability as the session token is exposed as part of the URL. A remote...

CVE-2019-18573

The CVE describes a Session Fixation vulnerability in RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03. The root cause is that the session token is exposed in the URL, enabling an authenticated local user’s session to be hijacked, after which ...

CVE-2019-18572

CVE-2019-18572 affects Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance prior to version 7.1.1 P03. The issue is an Improper Authentication where a Java JMX agent on the remote host is configured with plain text password authentication, enabling an unauthenticated r...

CVE-2019-18571

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

CVE-2019-18571

The vulnerability is a reflected cross-site scripting (XSS) in RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03, specifically in the My Access Live (MAL) module. An authenticated local user can craft a URL that injects script, which is then ex...

Data governance and retention in your Microsoft 365 tenant—a secure and highly capable solution

Data governance has relied on transferring data to a third-party for hosting an archive service. Emails, documents, chat logs, and third-party data Bloomberg, Facebook, LinkedIn, etc. must be saved in a way that it can’t be changed and won’t be lost. Data governance is part of IT at the enterpris...

NCSC-NZ Releases Cyber Governance Resource for Leaders

The New Zealand National Cyber Security Centre NCSC-NZ has released an article on a new cybersecurity governance resource to support public and private sector leaders in making decisions about their cybersecurity resilience and risk. NCSC-NZ developed this governance—a series of documents with...

Security Bulletin: IBM InfoSphere Information Governance Catalog is affected by a privilege escalation vulnerability

Summary A privilege escalation vulnerability was addressed in InfoSphere Information Governance Catalog. Vulnerability Details CVEID: CVE-2019-4607 DESCRIPTION: IBM InfoSphere Information Governance Catalog could allow an authorized user to access details of both governance and information assets...

Gartner Names Microsoft a Leader in the 2019 Enterprise Information Archiving (EIA) Magic Quadrant

We often hear from customers about the explosion of data, and the challenge this presents for organizations in remaining compliant and protecting their information. We’ve invested in capabilities across the landscape of information protection and information governance, inclusive of archiving,...

Multiple Dell Products DSA-2019-164 Multiple Security Vulnerabilities

Description Multiple Dell products are prone to the following vulnerabilities: 1. A cross-site scripting vulnerability 2. An authentication-bypass vulnerability 3. A session fixation vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of the victim...