PT-2013-2736 · Apache+2 · Apache+2

Published 2013-05-22 · Updated 2013-05-22 · CVE-2013-0942

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Internet Information Services EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Apache

Description The issue is related to a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors.

Recommendations For EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Internet Information Services, update to version 7.1.1 or later. For EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Apache, update to version 7.1.1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-0942

Affected Products

Apache

Emc Rsa Authentication Agent

Internet Information Services

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-0942 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2013-05/0043.html · Note