cvedb.io
CVE-2018-1248
MEDIUM · CVSS 6.1
EPSS exploitation probability: 0%
Published 2018-05-08T13:29:01.943 · Last modified 2026-06-17T01:50:48.800

Summary

RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.

Affected products

rsa — authentication_manager

Does this affect you?

Add your gear to cvedb and we'll alert you only when rsa ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.