PT-2007-6690 · Rsa · Rsa Keon Registration Authority Web Interface

Published 2007-10-29 · Updated 2018-10-15 · CVE-2007-5703

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RSA KEON Registration Authority Web Interface version 1.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in specific components of the RSA KEON Registration Authority Web Interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML, potentially leading to unauthorized actions on the affected system. The exact vectors through which the attacks can be carried out are not specified.

Recommendations For RSA KEON Registration Authority Web Interface version 1.0, consider disabling the Request-spk.xuda and Add-msie-request.xuda components until a patch is available to prevent potential exploitation of the XSS vulnerabilities.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2007-5703

Affected Products

Rsa Keon Registration Authority Web Interface

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-5703 · Security Note
• http://vupen.com/english/advisories/2007/3658 · Note
• http://osvdb.org/38298 · Note
• http://gamasec.net/english/gs07-02.html · Note
• http://secunia.com/advisories/27384 · Note
• http://kb.cert.org/vuls/id/342793 · Note
• http://securityfocus.com/bid/26196 · Note
• http://osvdb.org/38299 · Note
• http://securityreason.com/securityalert/3314 · Note
• http://securityfocus.com/archive/1/482729/100/0/threaded · Note
• http://securitytracker.com/id?1018856 · Note