Twenty Year Anniversary

RSA Authentication Manager 8.2 SP1 P5 Cross Site Scripting

RSA Authentication Manager 8.2 SP1 P5 Cross Site Scripting
Posted Nov 21, 2017
Authored by Nirmal Kirubakaran | Site emc.com

RSA Authentication Manager versions 8.2 SP1 P5 and below suffer from a stored cross site scripting vulnerability.

tags | advisory, xss
advisories | CVE-2017-14379
MD5 | 98b56083996dc724062af46fed8262b5

RSA Authentication Manager 8.2 SP1 P5 Cross Site Scripting

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

ESA-2017-152: RSA(r) Authentication Manager Software Stored Cross-Site Scripting Vulnerability

EMC Identifier: ESA-2017-152

CVE Identifier: CVE-2017-14379

Severity Rating: CVSSv3 Base Score: 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)

Affected Products:
RSA(r) Authentication Manager software version 8.2 SP1 P5 and earlier

Summary:
RSA Authentication Manager software version 8.2 SP1 P6 contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Details:
The RSA Authentication Manager Security Console is affected by a stored cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the users browser session in the context of the RSA Authentication Manager application.

Recommendation:
The following RSA Authentication Manager software release contains a resolution for this vulnerability:
RSA Authentication Manager software version 8.2 SP1 Patch 6 and later

For documentation, downloads, and more, visit the RSA SecurID Suite page on RSA Link.

Credit:
RSA would like to thank Nirmal Kirubakaran from eBay Penetration Testing for reporting this vulnerability.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJaEup+AAoJEHbcu+fsE81ZvXkH/0Voy4RSnvF3Qygtm9bhOEuZ
rrMqIIf62+mZDU4qrvZE1uOq4SlVcr9/aLbsJRNWwsfaEVstbIxl5edKYAZHYp4g
RKTIsZ8iPv+aZERh7/SKlxIDzMd3+IGhxc/vHZ09xLPzstOMl8M+iQBzbK1qcshw
yl8DBoSm0yykrlHtYxkxtCaX0wDltoyxNMNEhpaxood82vd2tIb8YrmD95Sv8h8J
se0ugIlioYQg9Lm3PoYZe3ZAvj7XA/cf1h8PsjWpUuxYBHIxhxN6ZmG7aesgLzdW
jTMRHt7/iVrDYnuePqsD6QR7K0GeMU5n4ifOBBg/vgs4GaffPDti37O1VzpXfc0=
=6aat
-----END PGP SIGNATURE-----


Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

Want To Donate?


Bitcoin: 18PFeCVLwpmaBuQqd5xAYZ8bZdvbyEWMmU

File Archive:

August 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Aug 1st
    19 Files
  • 2
    Aug 2nd
    17 Files
  • 3
    Aug 3rd
    16 Files
  • 4
    Aug 4th
    1 Files
  • 5
    Aug 5th
    1 Files
  • 6
    Aug 6th
    19 Files
  • 7
    Aug 7th
    15 Files
  • 8
    Aug 8th
    9 Files
  • 9
    Aug 9th
    7 Files
  • 10
    Aug 10th
    10 Files
  • 11
    Aug 11th
    1 Files
  • 12
    Aug 12th
    0 Files
  • 13
    Aug 13th
    14 Files
  • 14
    Aug 14th
    18 Files
  • 15
    Aug 15th
    38 Files
  • 16
    Aug 16th
    16 Files
  • 17
    Aug 17th
    22 Files
  • 18
    Aug 18th
    0 Files
  • 19
    Aug 19th
    0 Files
  • 20
    Aug 20th
    0 Files
  • 21
    Aug 21st
    0 Files
  • 22
    Aug 22nd
    0 Files
  • 23
    Aug 23rd
    0 Files
  • 24
    Aug 24th
    0 Files
  • 25
    Aug 25th
    0 Files
  • 26
    Aug 26th
    0 Files
  • 27
    Aug 27th
    0 Files
  • 28
    Aug 28th
    0 Files
  • 29
    Aug 29th
    0 Files
  • 30
    Aug 30th
    0 Files
  • 31
    Aug 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close