CVE-2018-1248 RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attack...
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rsa authentication manager | <= 8.3 | No fix listed |
| Dell EMC RSA Authentication Manager Security Console, Operation Console and Self-Service Console | = version 8.3 and earlier | No fix listed |
References
- 20180504 DSA-2018-086: RSA Authentication Manager Multiple Vulnerabilities mailing-list third-party-advisory
- 104113 third-party-advisory vdb-entry
- 1040835 third-party-advisory vdb-entry