CVE-2018-11051

CVE-2018-11051 is a path traversal vulnerability affecting RSA Certificate Manager versions 6.9 build 560 through 6.9 build 564. A remote, unauthenticated attacker can exploit this by manipulating input parameters in the RSA CMP Enroll Server or RSA REST Enroll Server. This allows unauthorized read access to server files with the privileges of the web application, rated as High severity (CVSS 7.5). Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion.