Improper input validation in Emc Rsa Authentication Manager
CVE-2012-2279
Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.013 (66.8th percentile) — read the EPSS interpretation.
Affected products
- Emc Rsa_authentication_manager — versions 7.0, 7.1
- Rsa Authentication_manager — versions 7.1
- Rsa Securid_appliance — versions 2.0, 2.0.1, 2.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)