CVE-2018-1255 : What You Need to Know

RSA Identity Lifecycle and Governance software versions 7.0.1, 7.0.2, and 7.1.0 are vulnerable to reflected cross-site scripting, allowing remote attackers to execute harmful code.

Understanding CVE-2018-1255

This CVE involves a vulnerability in RSA Identity Governance and Lifecycle software that could be exploited by attackers to perform reflected cross-site scripting attacks.

What is CVE-2018-1255?

The versions 7.0.1, 7.0.2, and 7.1.0 of RSA Identity Lifecycle and Governance software have a vulnerability that allows for reflected cross-site scripting. This means that a remote attacker without authentication could exploit this vulnerability by deceiving a user of the targeted application into supplying harmful HTML or JavaScript code. This code is then reflected back to the user and executed by their web browser.

The Impact of CVE-2018-1255

CVSS Base Score: 6.1 (Medium Severity)
Attack Vector: Network
Attack Complexity: Low
User Interaction: Required
Scope: Changed
Confidentiality Impact: Low
Integrity Impact: Low
Privileges Required: None
Availability Impact: None

Technical Details of CVE-2018-1255

Vulnerability Description

The vulnerability in RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2, and 7.1.0 allows remote unauthenticated attackers to execute malicious code by tricking users into providing harmful HTML or JavaScript code.

Affected Systems and Versions

RSA Identity Governance and Lifecycle version 7.0.1, all patch levels
RSA Identity Governance and Lifecycle version 7.0.2, all patch levels
RSA Identity Governance and Lifecycle version 7.1.0, all patch levels

Exploitation Mechanism

Attackers can exploit this vulnerability by manipulating users into entering malicious code, which is then executed in the victim's web browser.

Mitigation and Prevention

Immediate Steps to Take

Apply security patches provided by RSA for the affected versions.
Educate users about the risks of executing code from untrusted sources.

Long-Term Security Practices

Regularly update and patch software to prevent known vulnerabilities.
Implement web application firewalls to filter and block malicious traffic.
Conduct security training for developers and users to recognize and avoid potential threats.

Patching and Updates

Ensure that all instances of RSA Identity Governance and Lifecycle software are updated with the latest security patches to mitigate the risk of exploitation.