VULNERABILITY INTELLIGENCE

CVE-2018-15782

CVSS score7.7 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2019-01-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authentication Manager system, could allow the attacker unauthorized access to that system.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references