PT-2018-11242 · Rsa · Rsa Authentication Manager Security Console

Publicado 2018-06-21 · Atualizado 2020-03-27 · CVE-2018-1254

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RSA Authentication Manager Security Console versions 8.3 P1 and earlier

Description The issue allows a remote unauthenticated attacker to potentially exploit a reflected cross-site scripting vulnerability by tricking a Security Console administrator into supplying malicious HTML or JavaScript code to a vulnerable web application. This code is then reflected back to the victim and executed by the web browser.

Recommendations For RSA Authentication Manager Security Console versions 8.3 P1 and earlier, update to a version later than 8.3 P1 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-1254

Produtos afetados

Rsa Authentication Manager Security Console

Referências · 5

• http://securitytracker.com/id/1041134 · Nota
• http://securityfocus.com/bid/104534 · Nota
• https://osv.dev/vulnerability/CVE-2018-1254 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1254 · Nota de Segurança
• http://seclists.org/fulldisclosure/2018/Jun/39 · Nota