CVE-2019-18573: High severity rsa identity governance and lifecycle vulnerability
The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious local user could potentially exploit this vulnerability as the session token is exposed as part of the URL. A remote attacker can gain access to victim’s session and perform arbitrary actions with privileges of the user within the compromised session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18573?
CVE-2019-18573 is classified as a high severity vulnerability due to the potential for session fixation attacks.
How do I fix CVE-2019-18573?
To mitigate CVE-2019-18573, upgrade to RSA Identity Governance and Lifecycle version 7.1.1 P03 or later.
Who is affected by CVE-2019-18573?
CVE-2019-18573 affects RSA Identity Governance and Lifecycle versions 7.0 to 7.1.0 P02.
What type of vulnerability is CVE-2019-18573?
CVE-2019-18573 is a session fixation vulnerability that allows an authenticated local user to exploit session tokens.
Can remote attackers exploit CVE-2019-18573?
While CVE-2019-18573 is primarily a local vulnerability, it can potentially be leveraged by remote attackers under certain conditions.