| Package | Affected versions | Patched versions |
|---|---|---|
| rsa authentication manager | = 8.4 | |
| authentication manager | < 8.4 | 8.4 |
RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could then be included in a report. When other Security Console administrators open the affected report, the injected scripts could potentially be executed in their browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free