CVE-2012-2280: Medium severity rsa authentication manager vulnerability
EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "Cross frame scripting vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2280?
CVE-2012-2280 has been classified as a high-severity vulnerability due to its potential for cross frame scripting attacks.
How do I fix CVE-2012-2280?
To fix CVE-2012-2280, upgrade EMC RSA Authentication Manager to version 7.1 SP4 P14 or later, or RSA SecurID Appliance to version 3.0 SP4 P14 or later.
What systems are affected by CVE-2012-2280?
CVE-2012-2280 affects EMC RSA Authentication Manager versions 7.1 before SP4 P14 and all RSA SecurID Appliance versions prior to SP4 P14.
What type of vulnerability is CVE-2012-2280?
CVE-2012-2280 is identified as a Cross Frame Scripting vulnerability, allowing attackers to inject arbitrary web scripts.
Can CVE-2012-2280 lead to data breaches?
Yes, exploitation of CVE-2012-2280 could allow remote attackers to compromise user sessions and access sensitive data.