ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability

ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...

CVE-2014-0623: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" issue...

CVE-2013-3273

EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file...

CVE-2013-3273

EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file...

PT-2013-4269

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager versions 7.1 through 7.1 SP4 P25 EMC RSA Authentication Manager version 8.0 through 8.0 P1 Description The issue allows local users to obtain sensitive information by reading the trace log file, as the cleartext...

CVE-2013-3273: Undefined Security Weakness

EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file...

CVE-2013-0947

EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a 1 log file or 2 configuration file...

Design/Logic Flaw

EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a 1 log file or 2 configuration file...

CVE-2013-0947

EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a 1 log file or 2 configuration file...

PT-2013-2741

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager version 8.0 before P1 Description The issue allows local users to discover sensitive information, including cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities, by reading...

CVE-2013-0947: Undefined Security Weakness

EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a 1 log file or 2 configuration file...

ESA-2013-040: RSA® Authentication Manager 8.0 Multiple Vulnerabilities

ESA-2013-040.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-040: RSA® Authentication Manager 8.0 Multiple Vulnerabilities EMC Identifier: ESA-2013-040 CVE Identifier: CVE-2013-0947, CVE-2013-1899 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected Products: R...

EMC RSA Authentication Manager multiple security vulnerabilities

Crossite scripting, open redirection...

ESA-2012-023: RSA Authentication Manager Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-023: RSA® Authentication Manager Multiple Vulnerabilities EMC Identifier: ESA-2012-023 CVE Identifier: CVE-2012-2278, CVE-2012-2279, CVE-2012-2280 Severity Rating: See below for scores for individual issues Affected Products: RSA Authenticati...

Open redirect

Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2012-2278

Multiple cross-site scripting XSS vulnerabilities in the 1 Self-Service Console and 2 Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2279

The CVE-2012-2279 issue affects RSA Authentication Manager 7.1 (before SP4 P14) and RSA SecurID Appliance 3.0 (before SP4 P14). The vulnerability is an open redirect in the RSA Security Console, enabling remote attackers to redirect users to arbitrary sites and potentially facilitate phishing via...

PT-2012-3918

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager versions 7.1 before SP4 P14 RSA SecurID Appliance versions 3.0 before SP4 P14 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations F...

PT-2012-3917

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager versions 7.1 before SP4 P14 RSA SecurID Appliance versions 3.0 before SP4 P14 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Self-Service Console and Security Console of t...

PT-2012-3919

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager versions 7.1 before SP4 P14 RSA SecurID Appliance versions 3.0 before SP4 P14 Description The issue is related to a Cross frame scripting vulnerability, which allows remote attackers to inject arbitrary web scrip...