Authorization ByPass Vulnerability

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (ACM). A remote authenticated malicious user with non-admin privileges could potentially bypass the Java Security Policies. Once bypassed, a malicious user could potentially run arbitrary system commands at the OS level with application owner privileges on the affected system.

N/A

N/A

Dell RSA Identity Lifecycle and Governance workflow architect组件安全漏洞

Dell RSA Identity Lifecycle and Governance是美国戴尔（Dell）公司的一套身份治理和生命周期管理解决方案。该产品包括访问认证、配置自动化和角色管理等功能。workflow architect是其中的一个工作流构建组件。 Dell RSA Identity Lifecycle and Governance 7.0.1版本、7.0.2版本和7.1.0版本中的workflow architect组件存在身份验证绕过漏洞。远程攻击者可利用该漏洞绕过Java Securit

N/A

N/A