| Package | Affected versions | Patched versions |
|---|---|---|
| netwitness | < 11.2.1.1 | 11.2.1.1 |
| security analytics | < 10.6.6.1 | 10.6.6.1 |
RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrary commands on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free