PT-2017-13428 · Apache+1 · Apache Web Server+1

Published 2017-11-29 · Updated 2017-12-19 · CVE-2017-14377

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent for Web: Apache Web Server versions 8.0 through 8.0.1 prior to Build 618

Description The issue is related to a security vulnerability that could potentially lead to authentication bypass.

Recommendations For EMC RSA Authentication Agent for Web: Apache Web Server versions 8.0 through 8.0.1, update to a version that includes Build 618 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-14377

Affected Products

Apache Web Server

Rsa Authentication Agent For Web

References · 5

• https://osv.dev/vulnerability/CVE-2017-14377 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14377 · Security Note
• http://securityfocus.com/bid/101980 · Note
• http://securitytracker.com/id/1039876 · Note
• http://seclists.org/fulldisclosure/2017/Nov/46 · Note