CVE-2012-2278: XSS
First published: Fri Jul 13 2012(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC RSA Authentication Manager | <=7.1 | |
| EMC RSA Authentication Manager | =7.0 | |
| EMC RSA Authentication Manager | =7.1 | |
| EMC RSA Authentication Manager | =7.1-sp3 | |
| EMC RSA Authentication Manager | =7.1-sp42 | |
| RSA SecurID Appliance | =2.0 | |
| RSA SecurID Appliance | =2.0.1 | |
| RSA SecurID Appliance | =2.0.2 | |
| RSA SecurID Appliance | =3.0 | |
| RSA SecurID Appliance | =3.0-sp2 | |
| RSA SecurID Appliance | =3.0-sp3 | |
| RSA SecurID Appliance | =3.0-sp4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2012-2278?
CVE-2012-2278 has a moderate severity rating as it allows for multiple cross-site scripting (XSS) vulnerabilities.
How do I fix CVE-2012-2278?
To fix CVE-2012-2278, it is recommended to upgrade EMC RSA Authentication Manager to version 7.1 SP4 P14 or later, or RSA SecurID Appliance to version 3.0 SP4 or later.
What software is affected by CVE-2012-2278?
CVE-2012-2278 affects EMC RSA Authentication Manager 7.1 prior to SP4 P14 and RSA SecurID Appliance 3.0 prior to SP4 P14.
What types of attacks can CVE-2012-2278 enable?
CVE-2012-2278 enables remote attackers to inject arbitrary web scripts or HTML into affected systems.
Is there a workaround for CVE-2012-2278?
There are no documented workarounds for CVE-2012-2278, so upgrading to affected versions is necessary.
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/emc
- canonical/emc rsa authentication manager
- version/emc rsa authentication manager/7.1
- version/emc rsa authentication manager/7.0
- version/emc rsa authentication manager/7.1-sp3
- vendor/rsa
- version/emc rsa authentication manager/7.1-sp42
- canonical/rsa securid appliance
- version/rsa securid appliance/2.0
- version/rsa securid appliance/2.0.1
- version/rsa securid appliance/2.0.2
- version/rsa securid appliance/3.0
- version/rsa securid appliance/3.0-sp2
- version/rsa securid appliance/3.0-sp3
- version/rsa securid appliance/3.0-sp4