| Package | Affected versions | Patched versions |
|---|---|---|
| rsa identity governance and lifecycle | = 7.1.0 | |
| rsa identity management and governance | = 6.9.0= 6.9.1 | |
| rsa via lifecycle and governance | = 7.0 |
RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scripts set an environment variable in an unintended manner. A local authenticated malicious user could trick the root user to run malicious code on the targeted system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free