PT-2011-4054 · Emc · Emc Rsa Adaptive Authentication On-Premise

Publicado 2011-12-14 · Atualizado 2012-01-24 · CVE-2011-2742

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise (AAOP) versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3

Description The issue is related to the improper performance of forensic evaluation upon receipt of device tokens from mobile apps. This might allow remote attackers to bypass intended application restrictions via a mobile device.

Recommendations For versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3, consider restricting the receipt of device tokens from mobile apps until a proper fix is applied. As a temporary workaround, restrict access to the mobile app functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2742

Produtos afetados

Emc Rsa Adaptive Authentication On-Premise

Referências · 3

• http://securityfocus.com/archive/1/520850 · Nota
• http://securitytracker.com/id?1026420 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2742 · Nota de Segurança