PT-2001-2248 · Rsa · Rsa Bsafe Ssl-J

Publicado 2001-09-12 · Atualizado 2021-11-08 · CVE-2001-1105

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RSA BSAFE SSL-J versions 3.0 through 3.1

Description The issue allows remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure, due to the caching of session IDs from failed login attempts.

Recommendations For RSA BSAFE SSL-J versions 3.0 through 3.1, consider disabling the session ID caching mechanism to prevent attackers from bypassing SSL client authentication.

Correção

Identificadores relacionados

CVE-2001-1105

Produtos afetados

Rsa Bsafe Ssl-J

Referências · 6

• http://rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html · Nota
• http://ciac.org/ciac/bulletins/l-141.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/3329 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7112 · Nota
• http://cisco.com/warp/public/707/SSL-J-pub.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1105 · Nota de Segurança