RSA NetWitness Platform versions before 11.1.0.2 and RSA Security Analytics versions before 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
emc rsa security analytics |
||
emc rsa netwitness |
Vulmon