Description
RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell EMC | RSA Authentication Manager Security Console, Operation Console and Self-Service Console | version 8.3 and earlier | — |
References
- 104113 vdb-entry
- 20180504 DSA-2018-086: RSA Authentication Manager Multiple Vulnerabilities mailing-list
- 1040835 vdb-entry