CVE-2019-18572: Critical severity rsa identity governance and lifecycle vulnerability
The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can connect to the JMX agent and monitor and manage the Java application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18572?
CVE-2019-18572 has a high severity due to improper authentication vulnerabilities in the affected RSA products.
How do I fix CVE-2019-18572?
To fix CVE-2019-18572, upgrade to RSA Identity Governance and Lifecycle version 7.1.1 P03 or later.
Which RSA products are affected by CVE-2019-18572?
CVE-2019-18572 affects RSA Identity Governance and Lifecycle versions prior to 7.1.1 P03.
What type of attack can exploit CVE-2019-18572?
An unauthenticated remote attacker can exploit CVE-2019-18572 by connecting to a Java JMX agent configured with plain text password authentication.
Is CVE-2019-18572 related to configuration issues?
Yes, CVE-2019-18572 is related to configuration issues, specifically regarding the use of plain text authentication for JMX agents.