0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
RSA Authentication Manager 8.2 SP1 P5 Cross Site Scripting Vulnerability
Author
Risk
[Security Risk Medium
]0day-ID
Category
Date add
CVE
Platform
ESA-2017-152: RSA(r) Authentication Manager Software Stored Cross-Site Scripting Vulnerability EMC Identifier: ESA-2017-152 CVE Identifier: CVE-2017-14379 Severity Rating: CVSSv3 Base Score: 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Affected Products: RSA(r) Authentication Manager software version 8.2 SP1 P5 and earlier Summary: RSA Authentication Manager software version 8.2 SP1 P6 contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system. Details: The RSA Authentication Manager Security Console is affected by a stored cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the users browser session in the context of the RSA Authentication Manager application. Recommendation: The following RSA Authentication Manager software release contains a resolution for this vulnerability: RSA Authentication Manager software version 8.2 SP1 Patch 6 and later For documentation, downloads, and more, visit the RSA SecurID Suite page on RSA Link. Credit: RSA would like to thank Nirmal Kirubakaran from eBay Penetration Testing for reporting this vulnerability. # 0day.today [2024-12-24] #