PT-2013-4267 · Emc · Emc Rsa Authentication Agent For Pam

Publicado

2013-08-28

·

Atualizado

2013-10-07

·

CVE-2013-3271

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent for PAM version 7.0 through 7.0.2.0
Description The issue makes it easier for remote attackers to discover correct login credentials via a brute-force attack because the maximum number of login attempts is enforced within the PAM-enabled application codebase instead of within the Agent codebase.
Recommendations For EMC RSA Authentication Agent for PAM versions 7.0 through 7.0.2.0, update to version 7.0.2.1 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2013-3271

Produtos afetados

Emc Rsa Authentication Agent For Pam