PT-2017-13428 · Apache+1 · Apache Web Server+1

Publicado 2017-11-29 · Atualizado 2017-12-19 · CVE-2017-14377

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent for Web: Apache Web Server versions 8.0 through 8.0.1 prior to Build 618

Description The issue is related to a security vulnerability that could potentially lead to authentication bypass.

Recommendations For EMC RSA Authentication Agent for Web: Apache Web Server versions 8.0 through 8.0.1, update to a version that includes Build 618 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-14377

Produtos afetados

Apache Web Server

Rsa Authentication Agent For Web

Referências · 5

• http://securityfocus.com/bid/101980 · Nota
• https://osv.dev/vulnerability/CVE-2017-14377 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14377 · Nota de Segurança
• http://securitytracker.com/id/1039876 · Nota
• http://seclists.org/fulldisclosure/2017/Nov/46 · Nota