CVE-2018-11073: DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

Security readout for executives and security teams

RSA Authentication Manager before 8.3 P3 has an Operations Console stored XSS flaw. A malicious or compromised console administrator could save script content that runs in another administrator's browser when they view the affected page. This is a privileged admin-to-admin issue, not a remote unauthenticated compromise. Exposure is likely limited to RSA Authentication Manager deployments running versions earlier than 8.3 P3 where the Operations Console is accessible to multiple administrators or compromised admin accounts. Treat as a moderate priority. Patch during the normal security maintenance cycle, but accelerate if admin account compromise is suspected or the Operations Console is broadly reachable. Mitigation focus: Upgrade RSA Authentication Manager to 8.3 P3 or a later vendor-supported fixed release.; Review RSA DSA-2018-152 and apply all vendor guidance for related vulnerabilities.; Restrict Operations Console access to trusted administrative networks and users..

Prepared

May 24, 2026, 20:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.