PT-2013-2725 · Microsoft+1 · Windows+1

Publicado 2013-03-05 · Atualizado 2013-03-06 · CVE-2013-0931

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent version 7.1.x before 7.1.2 on Windows

Description The issue allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration, due to the lack of enforcement of the Quick PIN Unlock timeout feature.

Recommendations For EMC RSA Authentication Agent version 7.1.x before 7.1.2 on Windows, update to version 7.1.2 or later to enforce the Quick PIN Unlock timeout feature and prevent bypassing the passcode requirement.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2013-0931

Produtos afetados

Emc Rsa Authentication Agent

Windows

Referências · 2

• http://archives.neohapsis.com/archives/bugtraq/2013-03/0001.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0931 · Nota de Segurança