CVE-2019-18573 | BDVDB-2026-127992 Detail

Description#

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious local user could potentially exploit this vulnerability as the session token is exposed as part of the URL. A remote attacker can gain access to victim’s session and perform arbitrary actions with privileges of the user within the compromised session.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-12-18Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.