PT-2018-11136

Name of the Vulnerable Software and Affected Versions RSA Authentication Agent versions 8.0.1 and earlier for Web for IIS Description The issue is related to insufficient access control list ACL permissions on a Windows Named Pipe, allowing unauthorized users with local system access to exploit i...

PT-2018-11125

Name of the Vulnerable Software and Affected Versions RSA Authentication Agent versions 8.0.1 and earlier for Web for both IIS and Apache Web Server Description The issue allows attackers to execute arbitrary HTML or JavaScript code in the user's browser session, potentially leading to the...

PT-2017-13428

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent for Web: Apache Web Server versions 8.0 through 8.0.1 prior to Build 618 Description The issue is related to a security vulnerability that could potentially lead to authentication bypass. Recommendations For EMC RS...

CVE-2017-14377: Improper Authentication

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...

CVE-2005-4734: Undefined Security Weakness

Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web aka SecurID Web Agent 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method...

CVE-2005-3329: Undefined Security Weakness

Cross-site scripting XSS vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operation...

CVE-2005-1118: Undefined Security Weakness

Cross-site scripting XSS vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter...