CVE Vulnerabilities

CVE-2012-2280

Published: Jul 13, 2012 | Modified: Mar 27, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a Cross frame scripting vulnerability.

Affected Software

Name Vendor Start Version End Version
Rsa_authentication_manager Emc * 7.1 (including)
Rsa_authentication_manager Emc 7.0 (including) 7.0 (including)
Rsa_authentication_manager Emc 7.1 (including) 7.1 (including)
Rsa_authentication_manager Emc 7.1-sp3 (including) 7.1-sp3 (including)
Authentication_manager Rsa 7.1-sp42 (including) 7.1-sp42 (including)

References