Description
RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | RSA Authentication Manager | unspecified – < 8.4 P7 | 8.4 P7 |