medium4.3
CVE-2024-25066
RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity (XXE) attacks via a license file, resulting in attacker-controlled files being sto…
Impact
RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity (XXE) attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur.
Affected products
| Product | Affected versions |
|---|---|
| RSA Authentication Manager | before 8.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.