CVE-2019-3768

Publication date

2020-01-03 22:35:12

Family

dell

State

PUBLISHED

Description

RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.