Advisory regarding vulnerabilities reported by Oracle Java CVEs for applications running untrusted code
Last Modified: 2023-10-06
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Issue
However, a scanner can still detect this vulnerability on RSA Authentication Manager servers, such vulnerabilities are like the Oracle Java SE Multiple Vulnerabilities (January 2023 CPU) Plugin ID: 170161, and this article addresses concerns relating to vulnerabilities with a similar description.
Resolution
This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.The RSA Authentication Manager is a server-side application that loads and runs only trusted code (not code from web applets, web sites, etc). The RSA Authentication Manager is not a client application running untrusted code or relying upon the Java sandbox for security.
Hence any concerns regarding vulnerabilities with the above description are regarded as false positives with RSA Authentication Manager.
Related Articles
CVE-2021-41617 Security vulnerability for RSA Authentication Manager 8.6.x Number of Views Spring-related vulnerabilities for RSA Authentication Manager Number of Views Best practices for running vulnerability scans against RSA Authentication Manager 8.x Number of Views RSA Authentication Manager response to log4j vulnerabilities; CVE-2021-44228, CVE-2021-45046, CVE-2021-4104, CVE-2022-2330… Number of Views Security vulnerabilities CVE-2020-14882, CVE-2020-14883 and CVE-2020-14750, others in WebLogic an internal component in We… Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Reporting on RSA Authentication Manager 8.x users with On-Demand Token, a fixed passcode or a hardware/software token assi… How to Download OTP Token Seed Files from myRSA Anomalix idGenius - SAML Relying Party Configuration - RSA Ready Implementation Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
