ByteOS Network

CVE Vulnerability Details :

CVE-2019-3725

PUBLISHED

More Info Official Page

Assigner-dell

Assigner Org ID-c550e75a-17ff-4988-97f0-544cde3820fe

Published At-15 May, 2019 | 15:45

Updated At-16 Sep, 2024 | 19:01

▼CVE Numbering Authority (CNA)

Command Injection vulnerability

RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrary commands on the server.

Affected Products

Vendor

RSA Security LLC

Product

RSA Netwitness Platform

Versions

Affected

From unspecified through 11.2.1.1 (custom)

Vendor

RSA Security LLC

Product

RSA Security Analytics

Versions

Affected

From RSA Security Analytics through 10.6.6.1 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Command Injection vulnerability

Metrics

Version	Base score	Base severity	Vector
3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Credits

RSA would like to thank Nikolay Klendar for reporting CVE-2019-3725

References

Hyperlink	Resource
https://community.rsa.com/docs/DOC-104202	x_refsource_CONFIRM
http://www.securityfocus.com/bid/108355	vdb-entry x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://community.rsa.com/docs/DOC-104202	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/108355	vdb-entry x_refsource_BID x_transferred

Affected Products

Affected

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References