CVE-2018-11051

RSA Certificate Manager Path Traversal Vulnerability

High · published July 3, 2018

CVSS v3.0
7.5
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server. A remote unauthenticated attacker could potentially exploit this vulnerability by manipulating input parameters of the application to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02605 · 85.3th percentile
Published
2018-07-03T17:00Z
EPSS history
Timeline
  • 03 JUL 17:00Z
    RSA Certificate Manager Path Traversal Vulnerability
    cvelistv5