PT-2018-11227 · Rsa · Emc Rsa Web Threat Detection

Published 2018-06-05 · Updated 2019-07-15 · CVE-2018-1252

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RSA Web Threat Detection versions prior to 6.4

Description The issue allows an authenticated malicious user with low privileges to potentially execute SQL commands on the back-end database by supplying specially crafted input data to the affected Administration and Forensics applications. This could lead to unauthorized access to the tool's monitoring and user information.

Recommendations For RSA Web Threat Detection versions prior to 6.4, update to version 6.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Administration and Forensics applications to minimize the risk of exploitation.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-1252

Affected Products

Emc Rsa Web Threat Detection

References · 5

• https://osv.dev/vulnerability/CVE-2018-1252 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1252 · Security Note
• http://securityfocus.com/bid/104396 · Note
• http://securitytracker.com/id/1041026 · Note
• http://seclists.org/fulldisclosure/2018/Jun/4 · Note