CVE-2018-11075: DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

Security readout for executives and security teams

RSA Authentication Manager before 8.3 P3 has a reflected cross-site scripting flaw in a Security Console page. An attacker would need the victim user's anti-CSRF token and must trick that console user into interacting with malicious content. Business impact is limited but relevant because the console is administrative security infrastructure. Organizations running RSA Authentication Manager versions prior to 8.3 P3 are the known exposed population. The affected surface is the Security Console, especially users with console access who could be targeted through social engineering. Treat as a scheduled security-platform maintenance item unless the Security Console is broadly reachable or administrators are high-risk targets. It affects authentication infrastructure, but the documented exploit conditions are restrictive. Mitigation focus: Upgrade RSA Authentication Manager to 8.3 P3 or later per RSA guidance.; Restrict Security Console access to trusted networks and administrative users.; Warn console users against opening unsolicited links or supplied HTML content..

Prepared

May 25, 2026, 05:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.