CVE-2019-3711 - DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability

Back Back to CVE browser

HIGH

DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability

Published Mar 13, 2019

7.2

HIGH

CVSS 3.0

EPSS 1.97%

Description

RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may be able to obtain the value of a domain password that another Operations Console administrator had set previously and use it for attacks.

Affected products

Vendor Dell Product RSA Authentication Manager Default
n/a
- Version
  8.4
  Status
  affected
  Constraints
  <P1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

RSA Authentication Manager

n/a

Version	Status	Constraints
8.4	affected	<P1

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://www.securityfocus.com/bid/107210
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://seclists.org/fulldisclosure/2019/Mar/5
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/107210		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://seclists.org/fulldisclosure/2019/Mar/5		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Mar 13, 2019

Updated Sep 16, 2024

Reserved Jan 3, 2019

Link CVE-2019-3711

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-3711

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-3711