Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-3768 EUVD-2019-13403GHSA-rj6w-4jf4-f77j

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user co…

Published Jan 3, 2020 · Updated Sep 17, 2024 · Assigned by dell

Description

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.

Affected products

VendorProductAffectedFixed
Dell RSA Authentication Manager unspecified – < 8.4 P7 8.4 P7

References