CVE-2018-1248: RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and ea...

Security readout for executives and security teams

RSA Authentication Manager 8.3 and earlier has a Host header injection issue in its Security Console, Operations Console, and Self-Service Console. A remote attacker could abuse this to poison HTTP cache behavior and redirect users to arbitrary domains, creating phishing and trust risks around authentication workflows. Exposure is most likely where RSA Authentication Manager 8.3 or earlier consoles are reachable by untrusted users, especially through reverse proxies, shared caches, or externally accessible self-service portals. Treat this as a near-term remediation item if RSA Authentication Manager consoles are internet-facing or used for user self-service. The risk is mainly credential-trust erosion through redirection, not confirmed system takeover from the provided evidence. Mitigation focus: Review Dell EMC/RSA DSA-2018-086 for vendor-approved fixes or workarounds.; Upgrade affected RSA Authentication Manager deployments if vendor guidance identifies a fixed release.; Restrict console access to trusted networks, VPN, or administrative segments..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.