CVE-2019-3768

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security_alert@emc.com

Published

2020-01-03

Last modified

2024-09-17

Weaknesses

CWE-611

Affected products

• Rsa Authentication Manager (Dell)
• Rsa Authentication Manager (Emc)

References

• https://www.dell.com/support/security/en-us/details/DOC-108320/DSA-2019-148-RSA&#174%3B-Authentication-Manager-Software…