CVE-2019-3759

CVE-2019-3759 is a code injection vulnerability affecting RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to version 7.1.0 P08. A remote authenticated attacker can exploit this flaw to execute custom Groovy scripts, potentially gaining limited access to view or modify information within the Workflow system. With a CVSS score of 8.1 (High), this vulnerability is easily exploitable over the network with low attack complexity and requires only low privileges, leading to high confidentiality and integrity impacts. While not on the KEV catalog, an exploit for remote code execution is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.