Medium severity6.1NVD Advisory· Published May 8, 2018· Updated Jun 17, 2026
CVE-2018-1248
CVE-2018-1248
Description
RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.
Affected products
3cpe:2.3:a:rsa:authentication_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rsa:authentication_manager:*:*:*:*:*:*:*:*range: <=8.3
- (no CPE)range: <=8.3
- Dell EMC/RSA Authentication Manager Security Console, Operation Console and Self-Service Consolev5Range: version 8.3 and earlier
Patches
Vulnerability mechanics
References
3- seclists.org/fulldisclosure/2018/May/18nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/104113nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040835nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.