CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Input Validation
Summary: the emc rsa identity governance and lifecycle, rsa via lifecycle and governance and rsa img products (rsa identity governance and lifecycle versions 7.0.1, 7.0.2, all patch levels; rsa via lifecycle and governance version 7.0, all patch levels; rsa identity management and governance (rsa img) versions 6.9.1, all patch levels) allow an application administrator to upload arbitrary files that may potentially contain a malicious code. the malicious file could be then executed on the affected system with the privileges of the user the application is running under.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-07-17
Last Modified Date: 2017-07-27