Skip to content
Sign in
8.8 High

CVE-2019-3763 The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08…

Description

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. The Office 365 user password may get logged in a plain text format in the Office 365 connector debug log file. An authenticated malicious local user with access to the debug logs may obtain the exposed password to use in further attacks.

Affected products and versions

Product Affected versions Fixed in
RSA Identity Governance and Lifecycle 7.0 7.0.1 → 7.0.2 No fix stated
RSA Via Lifecycle and Governance 7.0 No fix stated

Other CVEs of RSA Identity Governance and Lifecycle

The 4 CVEs of RSA Identity Governance and Lifecycle →
CVE-2019-3759 The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08… 6.4 Medium CVE-2019-3760 The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08… 6.4 Medium CVE-2019-3761 The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08… 5.4 Medium
Track this CVE