CVE-2018-15782: DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability
The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-15782?
CVE-2018-15782 is a vulnerability in the Quick Setup component of RSA Authentication Manager versions prior to 8.4.
What is the severity of CVE-2018-15782?
The severity of CVE-2018-15782 is high with a CVSS score of 7.8.
How does CVE-2018-15782 affect RSA Authentication Manager?
CVE-2018-15782 affects RSA Authentication Manager versions prior to 8.4.
How can a local attacker exploit CVE-2018-15782?
A local attacker could potentially provide an administrator with a crafted license during the Quick Setup deployment of the initial RSA Authentication Manager, allowing for a relative path traversal vulnerability.
Is there a fix available for CVE-2018-15782?
Yes, upgrading to RSA Authentication Manager version 8.4 or newer resolves the vulnerability.