CVE-2018-11049

RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scripts set an environment variable in an unintended manner. A local authenticated malicious user could trick the root user to run malicious code on the targeted system.

• CWE-427

• http://seclists.org/fulldisclosure/2018/Jul/23Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104722Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041228Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/23Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104722Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041228Third Party Advisory, VDB Entry

Published

Jul 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11043Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-11044Pivotal Apps Manager included in Pivotal Application Service…
• CVE-2018-11045Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and …
• CVE-2018-11046Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 an…
• CVE-2018-11047Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 pr…
• CVE-2018-11048Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.…8.1
• CVE-2018-1105Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-11050Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through …
• CVE-2018-11051RSA Certificate Manager Versions 6.9 build 560 through 6.9 b…7.5
• CVE-2018-11052Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authent…9.8
• CVE-2018-11053Dell EMC iDRAC Service Module for all supported Linux and Xe…6.5
• CVE-2018-11054RSA BSAFE Micro Edition Suite, version 4.1.6, contains an in…7.5