CVE-2019-3768

RSA Authentication Manager versions prior to 8.4 P7 are affected by an XML External Entity/Entity Injection vulnerability. A remote authenticated user could disclose local system files by sending specially crafted XML messages. The vulnerability is network-exploitable with low complexity and requ...