CVE-2018-1248

RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security_alert@emc.com

Published

2018-05-08

Last modified

2024-09-16

Weaknesses

CWE-601

Affected products

• Operation Console And Self-service Console (Dell Emc)
• Rsa Authentication Manager Security Console (Dell Emc)
• Authentication Manager (Rsa)

References

• http://seclists.org/fulldisclosure/2018/May/18
• http://www.securityfocus.com/bid/104113
• http://www.securitytracker.com/id/1040835