Certificate Manager Path Traversal Vulnerability

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rsa:certificate_manager_path_traversal_vulnerability:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRsa (6c9430aa-ac8c-5ac3-900a-ccfffd5a25d5)
ProductCertificate Manager Path Traversal Vulnerability (28c77d69-c219-5098-8ce1-d9f259ccc71e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-11051 vulnerable 2026-06-03 14:38:00.762756 RSA Certificate Manager Path Traversal Vulnerability
HIGH (7.5)
RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server. A remote unauthenticated attacker could potentially exploit this vulnerability by manipulating input parameters of the application to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.
Published: 2018-07-03T17:00:00.000Z
Updated: 2024-09-16T21:08:18.669Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.