Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveDellCVE-2011-2742
HistoryDec 14, 2011 - 11:55 a.m.

CVE-2011-2742

2011-12-1411:55:06
CWE-264
dell
web.nvd.nist.gov
28
emc
rsa
aaop
cve-2011-2742
security
vulnerability
mobile device
app restrictions

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.005

Percentile

75.5%

JSON

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile device.

Affected configurations

Nvd
Node
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp1_patch2
OR
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp1_patch3
OR
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp2
OR
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp2_patch1
OR
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp3
VendorProductVersionCPE
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch2:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch3:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2_patch1:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3:*:*:*:*:*:*

Related

prion 1
nvd 1
cvelist 1
securityvulns 2
prion
prion
Design/Logic Flaw
2011-12-14 11:55:00
nvd
nvd
CVE-2011-2742
2011-12-14 11:55:06
cvelist
cvelist
CVE-2011-2742
2011-12-14 11:00:00
securityvulns
securityvulns
EMC RSA Adaptive Authentication (On-Premise) security vulnerabilities
2011-12-19 00:00:00
ESA-2011-036: RSA, The Security Division of EMC, announces the release of a Security Fix for RSA(r) Adaptive Authentication (On-Premise)
2011-12-19 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.005

Percentile

75.5%

JSON
Related for CVE-2011-2742
prion1nvd1cvelist1securityvulns2