CVE Daily

CVE-2019-3768

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Inject...

Medium CVSS 6.5

Overview

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.

CWE: CWE-611 Published: 2020-01-03T23:15:12.273
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags