CWE Code: 863
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Incorrect Authorization
Summary: rsa identity lifecycle and governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (acm). a remote authenticated malicious user with non-admin privileges could potentially bypass the java security policies. once bypassed, a malicious user could potentially run arbitrary system commands at the os level with application owner privileges on the affected system.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-07-13
Last Modified Date: 2019-10-09