DSA-2018-132: RSA NetWitness Platform Server-Side Template Injection Vulnerability

Posted by Dell EMC Product Security Response Center on Aug 21

DSA-2018-132: RSA NetWitness Platform Server-Side Template Injection Vulnerability

Dell EMC Identifier: DSA-2018-132

CVE Identifier: CVE-2018-11061

Severity Rating: CVSS v3 Base Score: 9.1 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)

Severity: Critical

Affected Products:

RSA NetWitness Platform versions prior to 11.1.0.2
RSA Security Analytics versions prior to 10.6.6

Summary:

RSA NetWitness Platform contains fixes for a server-side template...