CVE-2019-3725: RSA Netwitness Platform

Описание

Оригинално описание

RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrary commands on the server.

Засегнати продукти

• RSA RSA Netwitness Platform: unspecified до 11.2.1.1
• RSA RSA Security Analytics: RSA Security Analytics до 10.6.6.1

История

Други уязвимости в RSA RSA Netwitness Platform

• 6.5CVE-2019-3724

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-3725
• https://nvd.nist.gov/vuln/detail/CVE-2019-3725
• https://community.rsa.com/docs/DOC-104202
• http://www.securityfocus.com/bid/108355