PT-2018-11242 · Rsa · Rsa Authentication Manager Security Console

Published 2018-06-21 · Updated 2020-03-27 · CVE-2018-1254

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RSA Authentication Manager Security Console versions 8.3 P1 and earlier

Description The issue allows a remote unauthenticated attacker to potentially exploit a reflected cross-site scripting vulnerability by tricking a Security Console administrator into supplying malicious HTML or JavaScript code to a vulnerable web application. This code is then reflected back to the victim and executed by the web browser.

Recommendations For RSA Authentication Manager Security Console versions 8.3 P1 and earlier, update to a version later than 8.3 P1 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-1254

Affected Products

Rsa Authentication Manager Security Console

References · 5

• https://osv.dev/vulnerability/CVE-2018-1254 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1254 · Security Note
• http://securitytracker.com/id/1041134 · Note
• http://securityfocus.com/bid/104534 · Note
• http://seclists.org/fulldisclosure/2018/Jun/39 · Note