Vulnerability Details CVE-2018-15782
The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 9.4%
CVSS Severity
CVSS v3 Score 7.7
CVSS v2 Score 7.2
References
Products affected by CVE-2018-15782
-
cpe:2.3:a:rsa:authentication_manager:-
-
cpe:2.3:a:rsa:authentication_manager:6.0
-
cpe:2.3:a:rsa:authentication_manager:6.1
-
cpe:2.3:a:rsa:authentication_manager:7.0
-
cpe:2.3:a:rsa:authentication_manager:7.1
-
cpe:2.3:a:rsa:authentication_manager:8.0
-
cpe:2.3:a:rsa:authentication_manager:8.1
-
cpe:2.3:a:rsa:authentication_manager:8.2
-
cpe:2.3:a:rsa:authentication_manager:8.3