CVE-2018-1247 XML external entity in RSA Authentication Manager Security Console
Admin users can cause denial of service or extract server data via XXE injection in the RSA Authentication Manager Security Console.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-1247?
CVE-2018-1247 is a high-severity vulnerability in Dell EMC RSA Authentication Manager Security Console, published on 8 May 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application.
Weakness: CWE-611
Which versions are affected by CVE-2018-1247?
It affects 1 product.
Products include Rsa Authentication Manager.
How do I fix CVE-2018-1247?
No fix has been published for CVE-2018-1247 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-1247 being exploited?
There is no known exploitation of CVE-2018-1247 in the wild and no public exploit code.
Public exploit code: 2 Exploit-DB entries.
Other vulnerabilities in Dell EMC RSA Authentication Manager Security Console
Sources
Also known as GHSA-388m-42jq-jjrp.