Dell Rsa Authentication Manager vulnerabilities

CVE-2019-3711 [HIGH] CVE-2019-3711: RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulner RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may be able to obtain the value of a domain password that another Operations Console administrator had set previously and use it for attacks.

CVE-2018-15782 [HIGH] CWE-22 CVE-2018-15782: The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a rel The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized

CVE-2019-3768 [MEDIUM] CWE-611 CVE-2019-3768: RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.

CVE-2020-5340 [MEDIUM] CWE-79 CVE-2020-5340: RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerabi RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When othe

CVE-2020-5339 [MEDIUM] CWE-79 CVE-2020-5339: RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerabi RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When othe

CVE-2020-5346 [MEDIUM] CWE-79 CVE-2020-5346: RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerabi RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When othe

CVE-2019-18574 [MEDIUM] CWE-79 CVE-2019-18574: RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting v RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could then be included in a report. When other Security Console