CVE-2018-1248

Summary

RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.

Affected Software

VendorProductVersion RangeStatus
Dell EMCRSA Authentication Manager Security Console, Operation Console and Self-Service Consoleversion 8.3 and earlieraffected

Weaknesses

  • Host Header Injection Vulnerability

ADP Enrichment

CVE Program Container

Additional References

References