CVE-2018-15782
DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 Jan 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system.
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Dell · RSA Authentication ManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →