RSA Adaptive Authentication (On-Premise) CVE-2014-0638 Cross Frame Scripting Vulnerability

Bugtraq ID:	66571
Class:	Origin Validation Error
CVE:	CVE-2014-0638
Remote:	Yes
Local:	No
Published:	Apr 01 2014 12:00AM
Updated:	Apr 01 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

RSA Adaptive Authentication (On-Premise) CVE-2014-0638 Cross Frame Scripting Vulnerability

RSA Adaptive Authentication (On-Premise) is prone to a cross-frame scripting vulnerability.

Successful exploits will allow attackers to bypass the same-origin policy and perform unauthorized actions; other attacks are possible.

RSA Adaptive Authentication (On-Premise) CVE-2014-0638 Cross Frame Scripting Vulnerability

Attackers can exploit this issue by tricking an unsuspecting victim into visiting a malicious web page.

RSA Adaptive Authentication (On-Premise) CVE-2014-0638 Cross Frame Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RSA Adaptive Authentication (On-Premise) CVE-2014-0638 Cross Frame Scripting Vulnerability

References:

• Adaptive Authentication Homepage (RSA)
  
• RSA Homepage (RSA Security)