Unrated severityNVD Advisory· Published May 15, 2019· Updated Sep 16, 2024

Command Injection vulnerability

CVE-2019-3725

Description

RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrary commands on the server.

Affected products

EMC Corporation/Rsa Security Analyticsllm-fuzzy
Range: < 10.6.6.1
Rsa/NetWitnessllm-fuzzy
Range: < 11.2.1.1
RSA/RSA Netwitness Platformv5
Range: unspecified
RSA/RSA Security Analyticsv5
Range: RSA Security Analytics

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/108355mitrevdb-entryx_refsource_BID
community.rsa.com/docs/DOC-104202mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000