Vulnerability Intelligence Report
CVE-2018-11061
RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.
No Active Exploit Signals
CVSS Base Score
9.1
CRITICAL
Exploitability:2.3
Impact Score:6.1
EPSS Probability:4.98%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Dell EMC | RSA NetWitness | unspecified < 11.1.0.2 (affected) |
| Dell EMC | RSA Security Analytics | unspecified < 10.6.6 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.982%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Dell · Vendor · USA |
| Reserved | 2018-05-14T00:00:00 |
| Published | 2018-08-24T15:00:00 |
| Patch Date | 2018-08-22 |
| Last Updated | 2024-09-17T01:06:59 |
Community Chatter & Buzz