CVE-2011-1423

Vulnerability

A cross-site scripting (XSS) vulnerability exists in RSA Data Loss Prevention (DLP) Enterprise Manager versions 8.x prior to 8.5 SP1 [1]. The issue stems from improper input validation, allowing an attacker to inject arbitrary web script or HTML through unspecified vectors [1].

Exploitation

An attacker can exploit this vulnerability remotely without authentication, but the attack complexity is medium [1]. The attacker crafts a malicious request that, when processed by the vulnerable application, injects script into a page viewed by an authenticated administrator. No specific user interaction beyond the victim viewing the crafted page is required [1].

Impact

Successful exploitation allows the attacker to execute arbitrary script in the context of the victim's session, leading to partial confidentiality and integrity impact (e.g., data theft, session hijacking). Availability is not affected [1].

Mitigation

RSA recommends upgrading to RSA DLP Enterprise Manager version 8.5 SP1, which contains the fix for this vulnerability [1]. No workarounds are documented. The vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog.