CVE-2019-3763

HIGH

Dell Rsa Identity Governance And Lifecycle - Log Information Exposure

Title source: rule
STIX 2.1

Description

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. The Office 365 user password may get logged in a plain text format in the Office 365 connector debug log file. An authenticated malicious local user with access to the debug logs may obtain the exposed password to use in further attacks.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://community.rsa.com/docs/DOC-106943

Scores

CVSS v3 8.8
EPSS 0.0005
EPSS Percentile 15.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-532
Status published
Products (5)
dell/rsa_identity_governance_and_lifecycle 7.0.1 (7 CPE variants)
dell/rsa_identity_governance_and_lifecycle 7.0.2 (15 CPE variants)
dell/rsa_identity_governance_and_lifecycle 7.1.0 (8 CPE variants)
dell/rsa_identity_governance_and_lifecycle 7.1.1 (2 CPE variants)
dell/rsa_via_lifecycle_and_governance 7.0.0 (6 CPE variants)
Published Sep 11, 2019
Tracked Since Feb 18, 2026