CVE-2018-11075— DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of a target user's anti-CSRF token, could potentially exploit this vulnerability by tricking a victim Security Console user to supply malicious HTML or JavaScript code to the vulnerable web application, which code is then executed by the victim's web browser in the context of the vulnerable web application.

N/A

N/A

Dell EMC RSA Authentication Manager 跨站脚本漏洞

Dell EMC RSA Authentication Manager是美国戴尔（Dell）公司的一套集中式二元身份认证软件。该软件可跨物理站点集中管理二元身份认证、安全令牌、方法和用户等。 Dell EMC RSA Authentication Manager 8.3 P3之前版本中的Security Console页面存在跨站脚本漏洞。远程攻击者可通过诱使Security Console用户向受影响的Web应用程序发送恶意的HTML或JavaScript代码利用该漏洞在用户浏览器中执行代码。

N/A

N/A