PT-2011-4046 · Emc · Emc Rsa Adaptive Authentication On-Premise

Published 2011-08-18 · Updated 2018-10-09 · CVE-2011-2733

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise (AAOP) versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3

Description The issue allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally used authentication information and unspecified other session information, due to the reuse of authentication information during a session.

Recommendations For versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3, consider restricting access to sensitive resources until a patch is available to prevent the reuse of authentication information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-2733

Affected Products

Emc Rsa Adaptive Authentication On-Premise

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-2733 · Security Note
• http://securityreason.com/securityalert/8344 · Note
• http://securityfocus.com/bid/49574 · Note
• http://securityfocus.com/archive/1/519346/100/0/threaded · Note