ByteOS Network

CVE Vulnerability Details :

CVE-2018-1247

PUBLISHED

More Info Official Page

Assigner-dell

Assigner Org ID-c550e75a-17ff-4988-97f0-544cde3820fe

Published At-08 May, 2018 | 13:00

Updated At-16 Sep, 2024 | 16:39

▼CVE Numbering Authority (CNA)

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application.

Affected Products

Vendor

Dell Inc.

Product

RSA Authentication Manager Security Console

Versions

Affected

version 8.3 and earlier

Problem Types

Type	CWE ID	Description
text	N/A	XML External Entity Injection Vulnerability

References

Hyperlink	Resource
http://seclists.org/fulldisclosure/2018/May/18	mailing-list x_refsource_FULLDISC
http://www.securitytracker.com/id/1040835	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/104107	vdb-entry x_refsource_BID
https://www.exploit-db.com/exploits/44634/	exploit x_refsource_EXPLOIT-DB

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://seclists.org/fulldisclosure/2018/May/18	mailing-list x_refsource_FULLDISC x_transferred
http://www.securitytracker.com/id/1040835	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/104107	vdb-entry x_refsource_BID x_transferred
https://www.exploit-db.com/exploits/44634/	exploit x_refsource_EXPLOIT-DB x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References