173 matches found
CVE-2017-14378: Undefined Security Weakness
EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."...
CVE-2017-14377: Improper Authentication
EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...
Citrix Store Front MMC console crashes with RSA Authentication Agent 1.0 installed.
Even after uninstalling the RSA Authentication Agent 1.0 we get following error in event viewer logs: Error while creating the Citrix StoreFront Snap-in. Microsoft.Practices.Unity.ResolutionFailedException: Resolution of the dependency failed, type =...
UBUNTU-CVE-2015-3218
The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...
CVE-2015-3218
The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...
PT-2015-2602
Name of the Vulnerable Software and Affected Versions PolicyKit versions prior to 0.113 Description The issue is related to an integer overflow in the authentication agent new cookie function. This allows local users to gain privileges by creating a large number of connections, which triggers the...
RSA Security RSA Authentication Agent For Web 5.2 - Remote Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13168/info A remote cross-site scripting vulnerability affects the RSA Security RSA Authentication Agent for Web. This issue is due to a failure of the application to properly sanitize user-supplied input prior to includi...
SSH Communications Security SSH 1.2.27 Authentication Socket File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the system. SSH has the concept of authentication...
Check Point Software Firewall-1 3.0/1 4.0 Session Agent Impersonation Vulnerability
source: http://www.securityfocus.com/bid/1661/info A vulnerability exists in the Session Agent portion of Firewall-1, from Check Point. This vulnerability appears to affect all versions of the session agent prior to the one shipped in FW-1 4.1. The session agent listens on a Windows 9x or NT box...
RSA Authentication Agent for Web 5.3 - URI Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28907/info RSA Authentication Agent for Web is prone to a remote URI-redirection vulnerability because the application fails to adequately sanitize user-supplied input. A successful attack may aid in phishing-style attack...
CVE-2014-1673
Check Point Session Authentication Agent allows remote attackers to obtain sensitive information user credentials via unspecified vectors...
CVE-2014-1673
Technical details (affected product/version, exploit vectors, root cause) are not provided in the connected documents. No public specifics available; monitor for updates.
PT-2014-4287
Name of the Vulnerable Software and Affected Versions Check Point Session Authentication Agent affected versions not specified Description The issue allows remote attackers to obtain sensitive information, specifically user credentials, via unspecified vectors. Recommendations At the moment, ther...
CVE-2014-1673: Undefined Security Weakness
Check Point Session Authentication Agent allows remote attackers to obtain sensitive information user credentials via unspecified vectors...
Check Point response to Session Authentication Agent vulnerability
...
RSA Authentication Agent for Web for IIS Installed
Binary data rsaauthenticationagentforwebiis.nbin...
RSA Authentication Agent for Web for IIS 7.1.x < 7.1.2 Filter Bypass
The version of RSA Authentication Agent for Web for IIS is 7.1.x prior to 7.1.2. Such versions are potentially affected by an unspecified filter bypass vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70746; scriptversion"1.3"; scriptcvsdate"Date:...
ESA-2013-067: RSA® Authentication Agent for Web for Internet Information Services (IIS) Security Controls Bypass Vulnerability
ESA-2013-067.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-067: RSA® Authentication Agent for Web for Internet Information Services IIS Security Controls Bypass Vulnerability EMC Identifier: ESA-2013-067 CVE Identifier: CVE-2013-3280 Severity Rating: CVSS v2 Base Score: 9.0...
CVE-2013-3280
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash...
CVE-2013-3280: Undefined Security Weakness
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash...