CVE-2019-3768 — Dell / RSA Authentication Manager

Description (CNA)

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.

Affected (CNA)

Vendor / product	Versions
Dell / RSA Authentication Manager	affected unspecified before 8.4 P7

CWE

CWE-611

References

https://www.dell.com/support/security/en-us/details/DOC-108320/DSA-2019-148-RSA&#174%3B-Authentication-Manager-Software-XML-Entity-Injection-Vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/security/en-us/details/DOC-108320/DSA-2019-148-RSA&#174%3B-Authentication-Manager-Software-XML-Entity-Injection-Vulnerability