Unscored CVE-2003-0389 EUVD-2003-0383GHSA-45hg-qfm9-g6xh

Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote a…

Published Jun 20, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script.

References

20030619 R7-0014: RSA SecurID ACE Agent Cross Site Scripting mailing-list
http://www.rapid7.com/advisories/R7-0014.html