CVE-2019-3763 : Security Advisory and Response

An information disclosure vulnerability has been identified in the RSA Identity Governance and Lifecycle software, as well as the RSA Via Lifecycle and Governance products versions earlier than 7.1.0 P08. This vulnerability allows the Office 365 user password to be logged in plain text within the debug log file of the Office 365 connector. Exploitation of this vulnerability is possible by an authenticated malicious local user who has access to the debug logs. The exposed password could then be used in subsequent attacks.

Understanding CVE-2019-3763

This CVE involves an information exposure vulnerability in specific versions of RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products.

What is CVE-2019-3763?

CVE-2019-3763 is an information disclosure vulnerability that affects RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to version 7.1.0 P08. It allows an authenticated malicious local user to access the Office 365 user password in plain text from the debug log file of the Office 365 connector.

The Impact of CVE-2019-3763

CVSS Base Score: 8.8 (High)
Attack Vector: Local
Attack Complexity: Low
Privileges Required: Low
Confidentiality Impact: High
Integrity Impact: High
Availability Impact: High
Scope: Changed
User Interaction: None
This vulnerability poses a significant risk as it could lead to unauthorized access to sensitive information.

Technical Details of CVE-2019-3763

This section provides more in-depth technical details about the vulnerability.

Vulnerability Description

The vulnerability allows an authenticated local user to retrieve the Office 365 user password from the debug log file in plain text.

Affected Systems and Versions

RSA Identity Governance and Lifecycle versions less than 7.1.1 P02 and 7.1.0 P08
RSA Via Lifecycle and Governance version 7.0

Exploitation Mechanism

An authenticated malicious local user with access to the debug logs can exploit this vulnerability to obtain the exposed password.

Mitigation and Prevention

It is crucial to take immediate steps to address and prevent the exploitation of this vulnerability.

Immediate Steps to Take

Monitor and restrict access to debug logs containing sensitive information.
Implement strong authentication mechanisms to prevent unauthorized access.

Long-Term Security Practices

Regularly review and update security policies and procedures.
Conduct security training for employees to raise awareness of potential risks.

Patching and Updates

Apply the necessary patches and updates provided by Dell to mitigate this vulnerability.