Lucene search

DellCVELIST:CVE-2018-11073

HistorySep 28, 2018 - 6:00 p.m.

CVE-2018-11073 DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

2018-09-2818:00:00

dell

www.cve.org

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

26.5%

JSON

RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.

CNA Affected

[
  {
    "product": "Authentication Manager",
    "vendor": "RSA",
    "versions": [
      {
        "lessThan": "8.3 P3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105410

www.securitytracker.com/id/1041697

seclists.org/fulldisclosure/2018/Sep/39