CVE-2019-18572 HIGH

CVE-2019-18572

Vendor Dell
Product RSA Identity Governance & Lifecycle
Weakness CWE-306 · Missing auth
Published December 18, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can connect to the JMX agent and monitor and manage the Java application.

Key dates

02Disclosure timeline

December 18, 2019 CVE published
September 16, 2024 Record updated