PT-2015-6624 · Emc · Emc Rsa Web Threat Detection

Published 2015-10-12 · Updated 2021-08-06 · CVE-2015-4548

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC RSA Web Threat Detection versions prior to 5.1 SP1

Description The issue allows local users to obtain root privileges by leveraging access to a service account and writing commands to a service configuration file.

Recommendations For versions prior to 5.1 SP1, update to version 5.1 SP1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-4548

Affected Products

Emc Rsa Web Threat Detection

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-4548 · Security Note
• http://packetstormsecurity.com/files/133779/RSA-Web-Threat-Detection-Privilege-Escalation-Information-Disclosure.html · Note
• http://securitytracker.com/id/1033672 · Note
• http://seclists.org/bugtraq/2015/Sep/134 · Note