Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1248

Опубликовано: 08 мая 2018
Источник: nvd
CVSS3: 6.1
CVSS2: 5.8
EPSS Низкий

Описание

RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rsa:authentication_manager:*:*:*:*:*:*:*:*
Версия до 8.3 (включая)

EPSS

Процентиль: 61%
0.00406
Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
github
больше 3 лет назад

RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.

EPSS

Процентиль: 61%
0.00406
Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601