CVE-2015-0532: EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly rest...

Security readout for executives and security teams

This flaw lets a remote attacker abuse RSA Identity Management and Governance password reset logic for any valid account name. A successful attack could take over accounts, including privileged users, because the reset process was not properly restricted. Exposure is limited to organizations still running EMC RSA IMG 6.9 before P04 or 6.9.1 before P01, especially if reset workflows are reachable by untrusted networks. Treat as high priority if RSA IMG is present. The issue targets identity governance and can affect privileged accounts, so delay increases account takeover risk. Systems not running the named legacy versions are not indicated as affected by the provided sources. Mitigation focus: Upgrade RSA IMG 6.9 to P04, or 6.9.1 to P01, per the vendor advisory.; Check current RSA vendor guidance for any later supported remediation path.; Restrict network access to IMG password reset workflows until remediation is complete..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.