PT-2015-7391 · Emc · Emc Rsa Securid Web Agent

Publicado 2015-12-23 · Atualizado 2016-12-07 · CVE-2015-6851

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC RSA SecurID Web Agent versions prior to 8.0

Description The issue allows physically proximate attackers to bypass the privacy-screen protection mechanism. This can be achieved by leveraging an unattended workstation and utilizing the DOM Inspector.

Recommendations For versions prior to 8.0, update to version 8.0 or later to resolve the issue. As a temporary workaround, consider restricting access to unattended workstations to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-6851

Produtos afetados

Emc Rsa Securid Web Agent

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-6851 · Nota de Segurança
• http://securityfocus.com/bid/79646 · Nota
• http://packetstormsecurity.com/files/135013/RSA-SecurID-Web-Agent-Authentication-Bypass.html · Nota
• http://securitytracker.com/id/1034510 · Nota
• http://seclists.org/bugtraq/2015/Dec/115 · Nota