CVE-2018-15782

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system.

Score

CVSS 3.0 7.8 High

Status

Modified - security_alert@emc.com

Published

2019-01-16

Last modified

2024-09-17

Weaknesses

CWE-22

Affected products

• Rsa Authentication Manager (Dell)
• Authentication Manager (Rsa)

References

• https://seclists.org/fulldisclosure/2019/Jan/18