CVE-2017-8000
- State
- Published
- Severity
- Not scored
- Published
- Jul 17, 2017
- Updated
- Aug 5, 2024
- Reserved
- Apr 21, 2017
Description
In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store the profile name in the RSA Authentication Manager database. The profile name could include a crafted script (with an XSS payload) that could be executed when viewing or editing the assigned token profile in the token by another administrator's browser session.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
RSA Authentication Manager 8.2 SP1 and earliern/a |
|
References
- 1038878vdb-entry
- http://seclists.org/fulldisclosure/2017/Jul/25
- 99572vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.