Stored cross-site scripting vulnerability
CVE-2018-1253

6.5MEDIUM

Key Information:

Vendor

Rsa
Status
Authentication Manager
Vendor
CVE Published:
21 June 2018

What is CVE-2018-1253?

RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.

Affected Version(s)

Authentication Manager < 8.3 P1

References

http://www.securityfocus.com/bid/104534
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1041134
vdb-entryx_refsource_SECTRACK
http://seclists.org/fulldisclosure/2018/Jun/39
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.