PT-2013-4269 · Emc · Emc Rsa Authentication Manager

Published 2013-07-08 · Updated 2020-03-27 · CVE-2013-3273

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager versions 7.1 through 7.1 SP4 P25 EMC RSA Authentication Manager version 8.0 through 8.0 P1

Description The issue allows local users to obtain sensitive information by reading the trace log file, as the cleartext administrative password is not omitted from trace logging in custom SDK applications.

Recommendations For EMC RSA Authentication Manager versions 7.1 through 7.1 SP4 P25, update to SP4 P26 or later. For EMC RSA Authentication Manager version 8.0 through 8.0 P1, update to P2 or later.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2013-3273

Affected Products

Emc Rsa Authentication Manager

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-3273 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2013-07/0046.html · Note