CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 6.5
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: the rsa identity governance and lifecycle software and rsa via lifecycle and governance products prior to 7.1.0 p08 contain a sql injection vulnerability in workflow architect. a remote authenticated malicious user could potentially exploit this vulnerability to execute sql commands on the back-end database to gain unauthorized access to the data by supplying specially crafted input data to the affected application.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-09-11
Last Modified Date: 2019-10-09