CVE-2018-1182: High severity rsa identity governance and lifecycle vulnerability
An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts with root level privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1182?
CVE-2018-1182 is a vulnerability discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1 and 7.0.2.
How severe is CVE-2018-1182?
CVE-2018-1182 has a severity score of 7.8, which is considered high.
What software versions are affected by CVE-2018-1182?
CVE-2018-1182 affects EMC RSA Identity Governance and Lifecycle versions 7.0.1 and 7.0.2, and RSA Via Lifecycle and Governance version 7.0.
Where can I find more information about CVE-2018-1182?
You can find more information about CVE-2018-1182 at the following references: - [http://seclists.org/fulldisclosure/2018/Mar/16](http://seclists.org/fulldisclosure/2018/Mar/16) - [http://www.securityfocus.com/bid/103317](http://www.securityfocus.com/bid/103317) - [http://www.securitytracker.com/id/1040458](http://www.securitytracker.com/id/1040458)
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-1182?
CVE-2018-1182 is associated with CWE-269.