CVE-2018-11073 : Security Advisory and Response
Learn about CVE-2018-11073 affecting RSA Authentication Manager. Discover the impact, affected versions, and mitigation steps for this stored cross-site scripting vulnerability.
RSA Authentication Manager prior to 8.3 P3 is vulnerable to stored cross-site scripting, allowing unauthorized administrators to inject malicious code.
Understanding CVE-2018-11073
The vulnerability in RSA Authentication Manager could lead to the execution of arbitrary HTML or JavaScript code by compromised administrators.
What is CVE-2018-11073?
The Operations Console in RSA Authentication Manager versions before 8.3 P3 has a vulnerability that enables stored cross-site scripting. This flaw allows unauthorized administrators to store their own HTML or JavaScript code using the web interface.
The Impact of CVE-2018-11073
- CVSS Base Score: 6.5 (Medium Severity)
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: Required
- Scope: Changed
- Confidentiality, Integrity, and Availability Impact: Low
Technical Details of CVE-2018-11073
The technical aspects of the vulnerability in RSA Authentication Manager.
Vulnerability Description
RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. Malicious administrators could exploit this to inject arbitrary code.
Affected Systems and Versions
- Product: Authentication Manager
- Vendor: RSA
- Affected Versions: < 8.3 P3
Exploitation Mechanism
The vulnerability allows unauthorized administrators to store HTML or JavaScript code via the web interface, potentially leading to code execution in other administrators' browsers.
Mitigation and Prevention
Steps to address and prevent the CVE-2018-11073 vulnerability.
Immediate Steps to Take
- Update RSA Authentication Manager to version 8.3 P3 or later.
- Monitor administrator activities for suspicious behavior.
- Educate administrators on secure coding practices.
Long-Term Security Practices
- Regularly audit and review administrator access levels.
- Implement web application firewalls to detect and block malicious scripts.
Patching and Updates
- Apply security patches and updates provided by RSA to fix the vulnerability.