CVE-2016-0918

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-24 · updated 2026-06-17
Weakness: CWE-200

Description

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.

Affected products

EMC Rsa Identity Management And Governance: through 6.8.1; 6.9.0, 6.9.1
EMC Rsa Via Lifecycle And Governance: through 7.0.0

References

http://seclists.org/bugtraq/2016/Sep/52
http://www.securityfocus.com/bid/93108
http://www.securitytracker.com/id/1036896
http://seclists.org/bugtraq/2016/Sep/52
http://www.securityfocus.com/bid/93108
http://www.securitytracker.com/id/1036896

Get alerted when CVE-2016-0918 or the next vulnerability affects your stack