mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-23 15:00:20 +02:00
0xMarcio
1.3 KiB
1.3 KiB
CVE-2019-3760
Description
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the data by supplying specially crafted input data to the affected application.
POC
Reference
Github
No PoCs found on GitHub currently.