Description
RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim Security Console administrator to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RSA | RSA Authentication Manager | unspecified – ≤ 8.3 P1 | — |
References
- 104534 vdb-entry
- 1041134 vdb-entry
- 20180612 DSA-2018-107: RSA Authentication Manager Cross-site scripting Vulnerabilities mailing-list