PT-2012-3919 · Rsa+1 · Rsa Securid Appliance+1
Published
2012-07-13
·
Updated
2020-03-27
·
CVE-2012-2280
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
EMC RSA Authentication Manager versions 7.1 before SP4 P14
RSA SecurID Appliance versions 3.0 before SP4 P14
Description
The issue is related to a Cross frame scripting vulnerability, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This is due to the improper use of frames.
Recommendations
For EMC RSA Authentication Manager versions 7.1 before SP4 P14, update to SP4 P14 or later.
For RSA SecurID Appliance versions 3.0 before SP4 P14, update to SP4 P14 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Emc Rsa Authentication Manager
Rsa Securid Appliance