PT-2011-4046 · Emc · Emc Rsa Adaptive Authentication On-Premise

Publicado

2011-08-18

·

Atualizado

2018-10-09

·

CVE-2011-2733

CVSS v2.0

7.5

Alta

VetorAV:N/AC:M/Au:S/C:C/I:P/A:P
Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise (AAOP) versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3
Description The issue allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally used authentication information and unspecified other session information, due to the reuse of authentication information during a session.
Recommendations For versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3, consider restricting access to sensitive resources until a patch is available to prevent the reuse of authentication information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-2733

Produtos afetados

Emc Rsa Adaptive Authentication On-Premise