NetSight
high7.5

CVE-2024-28058

In RSA NetWitness (NW) Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an internal threat acto…

Impact

In RSA NetWitness (NW) Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an internal threat actor could impersonate the revoked user and gain unauthorized access to sensitive data.

Affected products

ProductAffected versions
RSA NetWitness (NW) Platform
before 12.5.1

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References