PT-2013-4269 · Emc · Emc Rsa Authentication Manager

Publicado 2013-07-08 · Atualizado 2020-03-27 · CVE-2013-3273

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager versions 7.1 through 7.1 SP4 P25 EMC RSA Authentication Manager version 8.0 through 8.0 P1

Description The issue allows local users to obtain sensitive information by reading the trace log file, as the cleartext administrative password is not omitted from trace logging in custom SDK applications.

Recommendations For EMC RSA Authentication Manager versions 7.1 through 7.1 SP4 P25, update to SP4 P26 or later. For EMC RSA Authentication Manager version 8.0 through 8.0 P1, update to P2 or later.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2013-3273

Produtos afetados

Emc Rsa Authentication Manager

Referências · 2

• http://archives.neohapsis.com/archives/bugtraq/2013-07/0046.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3273 · Nota de Segurança