A weakness and multiple vulnerabilities have been reported in RSA Authentication Manager, where one has an unknown impact and others can be exploited by malicious people to conduct spoofing and cross-site scripting attacks.

1) Certain input passed via the RSA Security Console is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website e.g. when a user clicks a specially crafted link to the affected script hosted on a trusted domain.

2) Certain input passed via the RSA Self-Service and Security Consoles is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

3) An unspecified error related to frames exists. No further information is currently available.

The weakness and the vulnerabilities are reported in RSA Authentication Manager version 7.1 and RSA SecurID Appliance version 3.0.

Solution
Install patch 14 for RSA Authentication Manager version 7.1 SP4 or RSA SecurID Appliance version 3.0 SP4.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
ESA-2012-023:
http://archives.neohapsis.com/archives/bugtraq/2012-07/att-0064/ESA-2012-023.txt

Deep Links
Links available to Secunia VIM customers