VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jan 3, 2020· Updated Jun 17, 2026

CVE-2019-3768

CVE-2019-3768

Description

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.

Affected products

10
  • EMC Corporation/Rsa Authentication Manager8 versions
    cpe:2.3:a:emc:rsa_authentication_manager:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:emc:rsa_authentication_manager:*:*:*:*:*:*:*:*range: <8.4
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:-:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p1:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p2:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p3:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p4:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p5:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p6:*:*:*:*:*:*
  • Rsa/Authentication Managerllm-fuzzy
    Range: <8.4 P7
  • Dell/RSA Authentication Managerv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.