CVE-2018-15782 - DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability

Back Back to CVE browser

HIGH

DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability

Published Jan 16, 2019

7.8

HIGH

CVSS 3.0

EPSS 0.42%

Description

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system.

Affected products

Vendor Dell Product RSA Authentication Manager Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <8.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

RSA Authentication Manager

n/a

Version	Status	Constraints
unspecified	affected	<8.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (1)

https://seclists.org/fulldisclosure/2019/Jan/18
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory

Link	Providers	Tags
https://seclists.org/fulldisclosure/2019/Jan/18		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Jan 16, 2019

Updated Sep 17, 2024

Reserved Aug 23, 2018

Link CVE-2018-15782

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-15782

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-15782