Skip to content
OpenAdvisories
Medium · 6.1 CVE-2018-11074 EUVD-2018-3118GHSA-9c4w-63hf-q5w2

DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

Published Sep 28, 2018 · Updated Sep 16, 2024 · Assigned by dell

Description

RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to the browser DOM, which code is then executed by the web browser in the context of the vulnerable web application.

Affected products

VendorProductAffectedFixed
RSA Authentication Manager unspecified – < 8.3 P3 8.3 P3

References