← voltar
CVE-2018-15782

DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability

CVSS 7.7 HIGHEPSS 0.4%
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 7.7EPSS 0.4%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
16 jan 2019Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system.
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →