PT-2012-3926 · Rsa+2 · Rsa Authentication Client+2

Publicado 2012-09-25 · Atualizado 2019-02-26 · CVE-2012-2287

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent version 7.1 RSA Authentication Client version 3.5

Description The issue allows remote authenticated users to bypass an intended token-authentication step and establish a login session to a remote host by leveraging Windows credentials for that host, when an unspecified configuration exists.

Recommendations For EMC RSA Authentication Agent version 7.1, consider reconfiguring the authentication settings to enforce token-based authentication. For RSA Authentication Client version 3.5, restrict the use of Windows credentials for remote host authentication until a proper fix is applied.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-2287

Produtos afetados

Emc Rsa Authentication Agent

Rsa Authentication Client

Windows

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/78802 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2287 · Nota de Segurança
• http://securityfocus.com/bid/55662 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-09/0102.html · Aviso do Fabricante