PT-2011-4053 · Emc · Emc Rsa Adaptive Authentication On-Premise

Publicado 2011-12-14 · Atualizado 2012-01-24 · CVE-2011-2741

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise (AAOP) versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3

Description The issue is related to the improper implementation of Device Recovery and Device Identification. This might allow remote attackers to bypass intended security restrictions on a previously non-registered device or a registered device by sending unspecified "data elements".

Recommendations For versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3, consider restricting access to the Device Recovery and Device Identification features until a proper fix is applied. As a temporary workaround, monitor device registrations and authentication attempts closely to detect potential bypass attempts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2741

Produtos afetados

Emc Rsa Adaptive Authentication On-Premise

Referências · 3

• http://securityfocus.com/archive/1/520850 · Nota
• http://securitytracker.com/id?1026420 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2741 · Nota de Segurança