CVE-2008-1470: Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and poss...

Security readout for executives and security teams

This is a cross-site scripting flaw in the WebID RSA Authentication Agent for IIS. A remote attacker could cause script to run in a user's browser through the postdata parameter. The available sources do not provide CVSS, a confirmed patch, or evidence of active exploitation. Exposure is most likely where legacy IIS deployments still use WebID RSA Authentication Agent 5.3 or possibly earlier versions. Because the affected inventory data is incomplete, teams should verify product names, installed DLLs, and authentication flows before assuming impact. Prioritize inventory and containment of legacy authentication systems. This is not KEV-listed and lacks a source-confirmed patch, but it affects an authentication component and could create user-facing trust risk if still deployed. Mitigation focus: Identify any WebID RSA Authentication Agent installations on IIS servers.; Check RSA or successor vendor guidance for supported fixes or migration paths.; Retire unsupported authentication agent versions where feasible..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.