The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. The Office 365 user password may get logged in a plain text format in the Office 365 connector debug log file. An authenticated malicious local user with access to the debug logs may obtain the exposed password to use in further attacks.
References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published: 2019-09-11T19:17:30.440600Z

Updated: 2024-09-16T22:20:25.143Z

Reserved: 2019-01-03T00:00:00

Link: CVE-2019-3763

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-09-11T20:15:11.630

Modified: 2024-11-21T04:42:29.020

Link: CVE-2019-3763

cve-icon Redhat

No data.