CVE-2018-11061 - RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product

Back Back to CVE browser

CRITICAL

RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product

Published Aug 24, 2018

9.1

CRITICAL

CVSS 3.0

EPSS 4.98%

Description

RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.

Affected products

Vendor Dell EMC Product RSA NetWitness Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <11.1.0.2
Vendor Dell EMC Product RSA Security Analytics Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <10.6.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell EMC

RSA NetWitness

n/a

Version	Status	Constraints
unspecified	affected	<11.1.0.2

Dell EMC

RSA Security Analytics

n/a

Version	Status	Constraints
unspecified	affected	<10.6.6

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://seclists.org/fulldisclosure/2018/Aug/32
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
http://www.securityfocus.com/bid/105134
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041541
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041542
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://seclists.org/fulldisclosure/2018/Aug/32		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
http://www.securityfocus.com/bid/105134		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041541		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041542		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Aug 24, 2018

Updated Sep 17, 2024

Reserved May 14, 2018

Link CVE-2018-11061

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-11061

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-11061