CVE-2018-1232

CVE-2018-1232 affects RSA Authentication Agent for Web (IIS and Apache) up to version 8.0.1, vulnerable to a stack-based buffer overflow when processing certain malformed web cookies. This can crash the authentication agent, causing a denial of service. Other sources reiterate similar vulnerabili...

CVE-2018-1233

RSA Authentication Agent for Web for IIS and for Apache Web Server (versions 8.0.1 and earlier) are affected by a cross-site scripting (CVE-2018-1233) vulnerability that could allow an attacker to execute arbitrary HTML/JavaScript in a user’s browser session. Public details in multiple sources de...

CVE-2018-1232

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the...

RSA Authentication Agent for Web for Apache 8.x < 8.0.1 Build 618 Filter Bypass

The version of RSA Authentication Agent for Web for Apache is 8.x prior to 8.0.1 Build 618. It is, therefore, potentially affected by an unspecified authentication bypass vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105413; scriptversion"1.5";...

CVE-2017-14377

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...

Authentication flaw

EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."...

Authentication flaw

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...

CVE-2017-14377

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...

CVE-2017-14377

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...

Citrix Store Front MMC console crashes with RSA Authentication Agent 1.0 installed.

Even after uninstalling the RSA Authentication Agent 1.0 we get following error in event viewer logs: Error while creating the Citrix StoreFront Snap-in. Microsoft.Practices.Unity.ResolutionFailedException: Resolution of the dependency failed, type =...

CVE-2015-3218

The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...

UBUNTU-CVE-2015-3218

The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...

SSH Communications Security SSH 1.2.27 Authentication Socket File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the system. SSH has the concept of authentication...

RSA Authentication Agent for Web 5.3 - URI Redirection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28907/info RSA Authentication Agent for Web is prone to a remote URI-redirection vulnerability because the application fails to adequately sanitize user-supplied input. A successful attack may aid in phishing-style attack...

RSA Security RSA Authentication Agent For Web 5.2 - Remote Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13168/info A remote cross-site scripting vulnerability affects the RSA Security RSA Authentication Agent for Web. This issue is due to a failure of the application to properly sanitize user-supplied input prior to includi...

Check Point Software Firewall-1 3.0/1 4.0 Session Agent Impersonation Vulnerability

source: http://www.securityfocus.com/bid/1661/info A vulnerability exists in the Session Agent portion of Firewall-1, from Check Point. This vulnerability appears to affect all versions of the session agent prior to the one shipped in FW-1 4.1. The session agent listens on a Windows 9x or NT box...

CVE-2014-1673

Check Point Session Authentication Agent allows remote attackers to obtain sensitive information user credentials via unspecified vectors...

CVE-2014-1673

Technical details (affected product/version, exploit vectors, root cause) are not provided in the connected documents. No public specifics available; monitor for updates.

Check Point response to Session Authentication Agent vulnerability

...

RSA Authentication Agent for Web for IIS 7.1.x < 7.1.2 Filter Bypass

The version of RSA Authentication Agent for Web for IIS is 7.1.x prior to 7.1.2. Such versions are potentially affected by an unspecified filter bypass vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70746; scriptversion"1.3"; scriptcvsdate"Date:...