CVE-2019-3763

HIGH

RSA Identity Governance and Lifecycle < 7.1.0 P08 - Authenticated Information Exposure via Office 365 Connector

Title source: llm
STIX 2.1

Description

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. The Office 365 user password may get logged in a plain text format in the Office 365 connector debug log file. An authenticated malicious local user with access to the debug logs may obtain the exposed password to use in further attacks.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://community.rsa.com/docs/DOC-106943

Scores

CVSS v3 8.8
EPSS 0.0032
EPSS Percentile 24.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-532
Status published
Products (5)
dell/rsa_identity_governance_and_lifecycle 7.0.1 (7 CPE variants)
dell/rsa_identity_governance_and_lifecycle 7.0.2 (15 CPE variants)
dell/rsa_identity_governance_and_lifecycle 7.1.0 (8 CPE variants)
dell/rsa_identity_governance_and_lifecycle 7.1.1 (2 CPE variants)
dell/rsa_via_lifecycle_and_governance 7.0.0 (6 CPE variants)
Published Sep 11, 2019
Tracked Since Feb 18, 2026