PT-2011-4052 · Emc+1 · Emc Rsa Key Manager Appliance+1

Publicado 2011-11-09 · Atualizado 2012-02-17 · CVE-2011-2740

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC RSA Key Manager (RKM) Appliance versions 2.7 SP1 through 2.7.1.5

Description The issue arises when using Firefox 4.x or 5.0 with the EMC RSA Key Manager (RKM) Appliance, where a user session is not properly terminated upon logout, potentially allowing remote attackers to execute arbitrary code on an unattended workstation.

Recommendations For EMC RSA Key Manager (RKM) Appliance versions 2.7 SP1 through 2.7.1.5, update to version 2.7.1.6 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2740

Produtos afetados

Emc Rsa Key Manager Appliance

Firefox

Referências · 4

• http://securityfocus.com/archive/1/520381 · Nota
• http://securitytracker.com/id?1026276 · Nota
• http://securityreason.com/securityalert/8529 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2740 · Nota de Segurança