CVE-2019-18573

Name of the Vulnerable Software and Affected Versions RSA Identity Governance and Lifecycle versions prior to 7.1.1 P03 RSA Via Lifecycle and Governance versions prior to 7.1.1 P03

Description The issue allows an authenticated malicious local user to exploit a Session Fixation vulnerability, as the session token is exposed as part of the URL. A remote attacker can gain access to the victim's session and perform arbitrary actions with the privileges of the user within the compromised session.

Recommendations For RSA Identity Governance and Lifecycle versions prior to 7.1.1 P03, update to version 7.1.1 P03 or later to resolve the issue. For RSA Via Lifecycle and Governance versions prior to 7.1.1 P03, update to version 7.1.1 P03 or later to resolve the issue.