PT-2012-1812 · Emc · Emc Rsa Envision

Published 2012-01-27 · Updated 2012-02-06 · CVE-2011-4143

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions 4.0 before SP4 P5 EMC RSA enVision versions 4.1 before P3

Description The issue allows remote attackers to obtain sensitive information about environment variables in the web system.

Recommendations For versions 4.0 before SP4 P5, update to at least SP4 P5. For versions 4.1 before P3, update to at least P3.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-4143

Affected Products

Emc Rsa Envision

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-4143 · Security Note
• http://securityfocus.com/archive/1/521375 · Note