Vulnerability-Lookup

CNVD-2018-09326

Vulnerability from cnvd - Published: 2018-05-11

Title

Dell EMC RSA Authentication Manager Security Console、Operation Console和Self-Service Console主机头注入漏洞

Description

Dell EMC RSA Authentication Manager是美国戴尔（Dell）公司的一套集中式二元身份认证软件。该软件可跨物理站点集中管理二元身份认证、安全令牌、方法和用户等。RSA Authentication Manager Security Console是其中的一个安全控制台程序；Operation Console是其中的一个操作控制台程序；Self-Service Console是其中的一个自助服务控制台程序。 Dell EMC RSA Authentication Manager 8.3及之前版本中的Security Console、Operation Console和Self-Service Console存在安全漏洞。远程攻击者可利用该漏洞造成HTTP缓存中毒，进而将用户重定向到任意的Web域。

Severity

中

Patch Name

Dell EMC RSA Authentication Manager Security Console、Operation Console和Self-Service Console主机头注入漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： https://www.dellemc.com/

Reference

http://seclists.org/fulldisclosure/2018/May/18

Impacted products

Name
DELL EMC RSA Authentication Manager <=8.3

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "104113"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-1248"
    }
  },
  "description": "Dell EMC RSA Authentication Manager\u662f\u7f8e\u56fd\u6234\u5c14\uff08Dell\uff09\u516c\u53f8\u7684\u4e00\u5957\u96c6\u4e2d\u5f0f\u4e8c\u5143\u8eab\u4efd\u8ba4\u8bc1\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u53ef\u8de8\u7269\u7406\u7ad9\u70b9\u96c6\u4e2d\u7ba1\u7406\u4e8c\u5143\u8eab\u4efd\u8ba4\u8bc1\u3001\u5b89\u5168\u4ee4\u724c\u3001\u65b9\u6cd5\u548c\u7528\u6237\u7b49\u3002RSA Authentication Manager Security Console\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u5b89\u5168\u63a7\u5236\u53f0\u7a0b\u5e8f\uff1bOperation Console\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u64cd\u4f5c\u63a7\u5236\u53f0\u7a0b\u5e8f\uff1bSelf-Service Console\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u81ea\u52a9\u670d\u52a1\u63a7\u5236\u53f0\u7a0b\u5e8f\u3002\r\n\r\nDell EMC RSA Authentication Manager 8.3\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u7684Security Console\u3001Operation Console\u548cSelf-Service Console\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210HTTP\u7f13\u5b58\u4e2d\u6bd2\uff0c\u8fdb\u800c\u5c06\u7528\u6237\u91cd\u5b9a\u5411\u5230\u4efb\u610f\u7684Web\u57df\u3002",
  "discovererName": "DELL",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.dellemc.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-09326",
  "openTime": "2018-05-11",
  "patchDescription": "Dell EMC RSA Authentication Manager\u662f\u7f8e\u56fd\u6234\u5c14\uff08Dell\uff09\u516c\u53f8\u7684\u4e00\u5957\u96c6\u4e2d\u5f0f\u4e8c\u5143\u8eab\u4efd\u8ba4\u8bc1\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u53ef\u8de8\u7269\u7406\u7ad9\u70b9\u96c6\u4e2d\u7ba1\u7406\u4e8c\u5143\u8eab\u4efd\u8ba4\u8bc1\u3001\u5b89\u5168\u4ee4\u724c\u3001\u65b9\u6cd5\u548c\u7528\u6237\u7b49\u3002RSA Authentication Manager Security Console\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u5b89\u5168\u63a7\u5236\u53f0\u7a0b\u5e8f\uff1bOperation Console\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u64cd\u4f5c\u63a7\u5236\u53f0\u7a0b\u5e8f\uff1bSelf-Service Console\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u81ea\u52a9\u670d\u52a1\u63a7\u5236\u53f0\u7a0b\u5e8f\u3002\r\n\r\nDell EMC RSA Authentication Manager 8.3\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u7684Security Console\u3001Operation Console\u548cSelf-Service Console\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210HTTP\u7f13\u5b58\u4e2d\u6bd2\uff0c\u8fdb\u800c\u5c06\u7528\u6237\u91cd\u5b9a\u5411\u5230\u4efb\u610f\u7684Web\u57df\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Dell EMC RSA Authentication Manager Security Console\u3001Operation Console\u548cSelf-Service Console\u4e3b\u673a\u5934\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "DELL EMC RSA Authentication Manager \u003c=8.3"
  },
  "referenceLink": "http://seclists.org/fulldisclosure/2018/May/18",
  "serverity": "\u4e2d",
  "submitTime": "2018-05-10",
  "title": "Dell EMC RSA Authentication Manager Security Console\u3001Operation Console\u548cSelf-Service Console\u4e3b\u673a\u5934\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2018-1248 (GCVE-0-2018-1248)

Vulnerability from cvelistv5 – Published: 2018-05-08 13:00 – Updated: 2024-09-16 16:13

Summary

RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.

Severity

No CVSS data available.

CWE

Host Header Injection Vulnerability

Assigner

dell mitre root Scorecard

References

3 references

URL	Tags
http://www.securityfocus.com/bid/104113	vdb-entryx_refsource_BID
http://seclists.org/fulldisclosure/2018/May/18	mailing-listx_refsource_FULLDISC
http://www.securitytracker.com/id/1040835	vdb-entryx_refsource_SECTRACK

Impacted products

1 product

Vendor	Product	Version
Dell EMC	RSA Authentication Manager Security Console, Operation Console and Self-Service Console	Affected: version 8.3 and earlier

Date Public

2018-05-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:49.048Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104113",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104113"
          },
          {
            "name": "20180504 DSA-2018-086: RSA Authentication Manager Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2018/May/18"
          },
          {
            "name": "1040835",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040835"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "RSA Authentication Manager Security Console, Operation Console and Self-Service Console",
          "vendor": "Dell EMC",
          "versions": [
            {
              "status": "affected",
              "version": "version 8.3 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2018-05-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Host Header Injection Vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-10T09:57:01.000Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "name": "104113",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104113"
        },
        {
          "name": "20180504 DSA-2018-086: RSA Authentication Manager Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2018/May/18"
        },
        {
          "name": "1040835",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040835"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security_alert@emc.com",
          "DATE_PUBLIC": "2018-05-04T00:00:00",
          "ID": "CVE-2018-1248",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "RSA Authentication Manager Security Console, Operation Console and Self-Service Console",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "version 8.3 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Dell EMC"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Host Header Injection Vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104113",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104113"
            },
            {
              "name": "20180504 DSA-2018-086: RSA Authentication Manager Multiple Vulnerabilities",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2018/May/18"
            },
            {
              "name": "1040835",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040835"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2018-1248",
    "datePublished": "2018-05-08T13:00:00.000Z",
    "dateReserved": "2017-12-06T00:00:00.000Z",
    "dateUpdated": "2024-09-16T16:13:25.346Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2018-09326

CVE-2018-1248 (GCVE-0-2018-1248)

Tags

Sightings

Nomenclature

Related by attack behaviour