RSA Authentication Agent for Web for IIS 8.x < 8.0.2 Multiple Vulnerabilities

The version of RSA Authentication Agent for Web for IIS is 8.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108889; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

RSA Authentication Agent for Web for Apache 8.x < 8.0.2 Multiple Vulnerabilities

The version of RSA Authentication Agent for Web for Apache is 8.x prior to 8.0.2. It is, therefore, potentially affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108888; scriptversion"1.5";...

CVE-2018-1232

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the...

CVE-2018-1234

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list ACL permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to...

CVE-2018-1233

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are affected by a cross-site scripting vulnerability. The attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context ...

CVE-2018-1234

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list ACL permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to...

Cross site scripting

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are affected by a cross-site scripting vulnerability. The attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context ...

CVE-2018-1232

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the...

CVE-2018-1232

CVE-2018-1232 affects RSA Authentication Agent for Web (IIS and Apache) up to version 8.0.1, vulnerable to a stack-based buffer overflow when processing certain malformed web cookies. This can crash the authentication agent, causing a denial of service. Other sources reiterate similar vulnerabili...

CVE-2018-1234

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list ACL permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to...

CVE-2018-1232: Out-of-bounds Write

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the...

PT-2018-11136

Name of the Vulnerable Software and Affected Versions RSA Authentication Agent versions 8.0.1 and earlier for Web for IIS Description The issue is related to insufficient access control list ACL permissions on a Windows Named Pipe, allowing unauthorized users with local system access to exploit i...

CVE-2018-1234: Exposure of Sensitive Information to an Unauthorized Actor

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list ACL permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to...

CVE-2018-1233: Improper Neutralization of Input During Web Page Generation

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are affected by a cross-site scripting vulnerability. The attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context ...

PT-2018-11119

Name of the Vulnerable Software and Affected Versions RSA Authentication Agent versions 8.0.1 and earlier for Web Description A stack-based buffer overflow issue may occur when handling certain malicious web cookies with invalid formats, potentially allowing an attacker to crash the authenticatio...

PT-2018-11125

Name of the Vulnerable Software and Affected Versions RSA Authentication Agent versions 8.0.1 and earlier for Web for both IIS and Apache Web Server Description The issue allows attackers to execute arbitrary HTML or JavaScript code in the user's browser session, potentially leading to the...

RSA Authentication Agent for Web for Apache 8.x < 8.0.1 Build 618 Filter Bypass

The version of RSA Authentication Agent for Web for Apache is 8.x prior to 8.0.1 Build 618. It is, therefore, potentially affected by an unspecified authentication bypass vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105413; scriptversion"1.5";...

CVE-2017-14377

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...

PT-2017-13429

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent API version 8.5 RSA Authentication Agent SDK version 8.6 Description The issue allows attackers to bypass authentication due to an error handling problem. Recommendations For EMC RSA Authentication Agent API versio...

PT-2017-13428

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent for Web: Apache Web Server versions 8.0 through 8.0.1 prior to Build 618 Description The issue is related to a security vulnerability that could potentially lead to authentication bypass. Recommendations For EMC RS...