XML Entity Injection Vulnerability in RSA Authentication Manager by Dell
CVE-2019-3768

6.5MEDIUM

Key Information:

Vendor

Dell
Status
Rsa Authentication Manager
Vendor
CVE Published:
3 January 2020

What is CVE-2019-3768?

The RSA Authentication Manager, specifically versions before 8.4 P7, has an XML Entity Injection vulnerability that enables a remote authenticated attacker to exploit the system. By sending specially crafted XML messages, the attacker could gain unauthorized access to sensitive information stored in local system files, posing significant security risks to the affected systems.

Affected Version(s)

RSA Authentication Manager < 8.4 P7

References

https://www.dell.com/support/security/en-us/details/DOC-1...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.