Security Advisory

CVE-2019-3768

6.5
MEDIUM

Vulnerability Description

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.
Published Date January 3, 2020
Official Source NIST NVD Advisory