CVE-2017-15546

The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability. Authenticated malicious users could potentially exploit this vulnerability to read any unencrypted data from the database.

Score

CVSS 3.0 4.3 Medium

Status

Modified - security_alert@emc.com

Published

2018-01-25

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Rsa Authentication Manager (Emc)

References

• http://seclists.org/fulldisclosure/2018/Jan/81
• http://www.securityfocus.com/bid/102838
• http://www.securitytracker.com/id/1040268