CVE-2018-1255: RSA Identity Governance and Lifecycle

Описание

Оригинално описание

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.

Засегнати продукти

• RSA RSA Identity Governance and Lifecycle: version 7.0.1, all patch levels; version 7.0.2, all patch levels; version 7.1.0, all patch levels

История

Други уязвимости в RSA RSA Identity Governance and Lifecycle

• 9.0CVE-2018-1245

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2018-1255
• https://nvd.nist.gov/vuln/detail/CVE-2018-1255
• http://www.securitytracker.com/id/1041287
• http://seclists.org/fulldisclosure/2018/Jul/46