CVE-2018-1253

Published: Jun 21, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.

Affected (13)

Products: Emc: Rsa Authentication Manager

Emc

1 product

Rsa Authentication Manager

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Emc Rsa Authentication Manager	Up to 7.0
Emc Rsa Authentication Manager	Version 7.1
Emc Rsa Authentication Manager	Version 7.1 sp2
Emc Rsa Authentication Manager	Version 7.1 sp3
Emc Rsa Authentication Manager	Version 7.1 sp4
Emc Rsa Authentication Manager	Version 8.0
Emc Rsa Authentication Manager	Version 8.0 p1
Emc Rsa Authentication Manager	Version 8.1
Emc Rsa Authentication Manager	Version 8.1 sp1
Emc Rsa Authentication Manager	Version 8.2
Emc Rsa Authentication Manager	Version 8.2 sp1
Emc Rsa Authentication Manager	Version 8.3
Emc Rsa Authentication Manager	Version 8.3 p1