CVE-2019-3759
MEDIUMRSA Identity Governance and Lifecycle < 7.1.0 P08 - Authenticated Code Injection via Groovy Script Execution
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-3759. PoCs published by Jakub Palaczynski.
AI-analyzed exploit summary This exploit demonstrates an authenticated remote code execution vulnerability in RSA IG&L Aveksa 7.1.1 by bypassing authorization to access the Workpoint Architect module, which allows execution of arbitrary Groovy scripts. The PoC includes steps to extract credentials, authenticate, create a malicious script, and execute it to run system commands.
Description
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a code injection vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to run custom Groovy scripts to gain limited access to view or modify information on the Workflow system.
Exploits (1)
This exploit demonstrates an authenticated remote code execution vulnerability in RSA IG&L Aveksa 7.1.1 by bypassing authorization to access the Workpoint Architect module, which allows execution of arbitrary Groovy scripts. The PoC includes steps to extract credentials, authenticate, create a malicious script, and execute it to run system commands.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N