CVE-2018-1182
First published: Thu Mar 08 2018(Updated: )
An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts with root level privileges.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC RSA Identity Governance and Lifecycle | =7.0.1 | |
| EMC RSA Identity Governance and Lifecycle | =7.0.2 | |
| EMC RSA Identity Management and Governance | =6.9.0 | |
| EMC RSA Identity Management and Governance | =6.9.1 | |
| Rsa Rsa Via Lifecycle And Governance | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-1182?
CVE-2018-1182 is a vulnerability discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1 and 7.0.2.
How severe is CVE-2018-1182?
CVE-2018-1182 has a severity score of 7.8, which is considered high.
What software versions are affected by CVE-2018-1182?
CVE-2018-1182 affects EMC RSA Identity Governance and Lifecycle versions 7.0.1 and 7.0.2, and RSA Via Lifecycle and Governance version 7.0.
Where can I find more information about CVE-2018-1182?
You can find more information about CVE-2018-1182 at the following references: - [http://seclists.org/fulldisclosure/2018/Mar/16](http://seclists.org/fulldisclosure/2018/Mar/16) - [http://www.securityfocus.com/bid/103317](http://www.securityfocus.com/bid/103317) - [http://www.securitytracker.com/id/1040458](http://www.securitytracker.com/id/1040458)
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-1182?
CVE-2018-1182 is associated with CWE-269.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/emc
- canonical/emc rsa identity governance and lifecycle
- version/emc rsa identity governance and lifecycle/7.0.1
- version/emc rsa identity governance and lifecycle/7.0.2
- canonical/emc rsa identity management and governance
- version/emc rsa identity management and governance/6.9.0
- version/emc rsa identity management and governance/6.9.1
- vendor/rsa
- canonical/rsa rsa via lifecycle and governance
- version/rsa rsa via lifecycle and governance/7.0