CVE-2016-0918

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.

Score

CVSS 3.0 4.3 Medium

Status

Modified - security_alert@emc.com

Published

2016-09-24

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Rsa Identity Management And Governance (Emc)
• Rsa Via Lifecycle And Governance (Emc)

References

• http://seclists.org/bugtraq/2016/Sep/52
• http://www.securityfocus.com/bid/93108
• http://www.securitytracker.com/id/1036896