CVE-2016-0918: Infoleak
EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0918?
CVE-2016-0918 is rated as a medium severity vulnerability due to the potential disclosure of sensitive user information.
How do I fix CVE-2016-0918?
To remediate CVE-2016-0918, upgrade EMC RSA Identity Management and Governance to versions 6.8.1 P25 or 6.9.1 P15, or RSA Via Lifecycle and Governance to version 7.0.0 P04 or later.
What products are affected by CVE-2016-0918?
CVE-2016-0918 affects EMC RSA Identity Management and Governance versions prior to 6.8.1 P25 and 6.9.x before 6.9.1 P15, as well as RSA Via Lifecycle and Governance before 7.0.0 P04.
What type of attack can exploit CVE-2016-0918?
CVE-2016-0918 can be exploited by remote authenticated users to manipulate URLs and gain unauthorized access to User Detail Popup information.
Is network administrator intervention required for CVE-2016-0918?
Yes, network administrators must apply the necessary patches or upgrades to mitigate CVE-2016-0918 effectively.