CVE-2016-0918

medium

Description

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.

References

http://www.securitytracker.com/id/1036896

http://www.securityfocus.com/bid/93108

http://seclists.org/bugtraq/2016/Sep/52

Details

Source: Mitre, NVD

Published: 2016-09-24

Updated: 2026-05-06

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N