PT-2018-11125 · Rsa · Rsa Authentication Agent

Publicado 2018-03-30 · Atualizado 2018-04-20 · CVE-2018-1233

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RSA Authentication Agent versions 8.0.1 and earlier for Web for both IIS and Apache Web Server

Description The issue allows attackers to execute arbitrary HTML or JavaScript code in the user's browser session, potentially leading to the exploitation of a cross-site scripting vulnerability. This could be done in the context of the affected website.

Recommendations For RSA Authentication Agent versions 8.0.1 and earlier, update to a version later than 8.0.1 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-1233

Produtos afetados

Rsa Authentication Agent

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-1233 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1233 · Nota de Segurança
• http://seclists.org/fulldisclosure/2018/Mar/60 · Nota
• http://securitytracker.com/id/1040577 · Nota