CVE-2020-5340
Summary
| CVE | CVE-2020-5340 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-03-26 13:15:00 UTC |
| Updated | 2022-09-30 23:06:00 UTC |
| Description | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators attempt to change the default security domain mapping, the injected scripts could potentially be executed in their browser. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Emc | Rsa Authentication Manager | All | All | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | - | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p1 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p2 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p3 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p4 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p5 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p6 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p7 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p8 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p9 | All | All |
| Application | Emc | Rsa Authentication Manager | All | All | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | - | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p1 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p2 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p3 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p4 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p5 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p6 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p7 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p8 | All | All |
| Application | Emc | Rsa Authentication Manager | 8.4 | p9 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| DSA-2020-052: RSA® Authentication Manager ... | RSA Link | MISC | community.rsa.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.