CVE-2019-3724 - CVE House
Back to Database
Status published Medium CVE-2019-3724

Authorization Bypass VulnerabilityRSA Netwitness Platform

Vulnerability Description

RSA Netwitness Platform versions prior to 11.2.1.1 is vulnerable to an Authorization Bypass vulnerability. A remote low privileged attacker could potentially exploit this vulnerability to gain access to administrative information including credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3724

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • RSA would like to thank Mantas Juškauskas for reporting CVE-2019-3724.

References

More from RSA

View All →
CVE-2024-25066
RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML...
Medium 4.3
CVE-2019-3725
Command Injection vulnerability
Critical 9.8
CVE-2018-1255
Reflected Cross-Site Scripting Vulnerability
Medium 6.1
CVE-2018-1254
RSA Authentication Manager Security Console, versions 8.3 P1 and earlier,...
Medium 6.1
CVE-2018-1253
Stored cross-site scripting vulnerability
Medium 6.5

Affected Vendor

Affected Software

RSA Netwitness Platform
Vulnerable Versions:
unspecified

Timeline

Official Publish: May 15th, 2019
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.