CVE-2018-1252: RSA Web Threat Detection SQL Injection Vulnerability
RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the tool's monitoring and user information by supplying specially crafted input data to the affected application.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1252?
CVE-2018-1252 is an SQL injection vulnerability found in RSA Web Threat Detection versions prior to 6.4.
How severe is CVE-2018-1252?
CVE-2018-1252 has a severity rating of 8.8, which is considered high.
What is affected by CVE-2018-1252?
RSA Web Threat Detection versions prior to 6.4 are affected by CVE-2018-1252.
How can this vulnerability be exploited?
An authenticated malicious user with low privileges can exploit CVE-2018-1252 to execute SQL commands on the back-end database.
Are there any references for CVE-2018-1252?
Yes, you can find references for CVE-2018-1252 in the following links: [http://seclists.org/fulldisclosure/2018/Jun/4](http://seclists.org/fulldisclosure/2018/Jun/4), [http://www.securityfocus.com/bid/104396](http://www.securityfocus.com/bid/104396), [http://www.securitytracker.com/id/1041026](http://www.securitytracker.com/id/1041026).