269 matches found
CVE-2014-2516
Open redirect in EMC RSA Authentication Manager 8.x prior to 8.1 Patch 6 allows remote attackers to redirect users to arbitrary websites, potentially aiding phishing. Affected product: RSA Authentication Manager 8.x. Vulnerable component/condition: unspecified URI redirection; root cause describe...
CVE-2014-2516
Open redirect vulnerability in EMC RSA Authentication Manager 8.x before 8.1 Patch 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2014-3402
CVE-2014-3402 affects Cisco IPS/IDS web framework: authentication-manager mismanages user tokens, enabling an authenticated remote attacker to trigger a DoS (MainApp hang) via a crafted request to the management interface. Valid for IPS 7.0(8)E4 and earlier. Exploitation requires existing authent...
CVE-2014-3402
The authentication-manager process in the web framework in Cisco Intrusion Prevention System IPS 7.08E4 and earlier in Cisco Intrusion Detection System IDS does not properly manage user tokens, which allows remote attackers to cause a denial of service temporary MainApp hang via a crafted...
Cisco Intrusion Prevention System MainApp Denial of Service Vulnerability
A vulnerability in the web framework of Cisco Intrusion Prevention System IPS Software could allow an authenticated, remote attacker to cause MainApp to hang intermittently because the authentication manager process creates a denial of service DoS condition. The vulnerability is due to improper...
EMC RSA Authentication Manager 7.x < 7.1 SP4 Patch 32 Unspecified XSS
The remote host is running a version of EMC RSA Authentication Manager 7 prior to 7.1 SP4 Patch 32. It is, therefore, affected by an unspecified cross-site scripting vulnerability. An attacker could potentially exploit this vulnerability to compromise the affected system. %NASLMINLEVEL 70300 C...
EMC RSA Authentication Manager Version
Binary data emcrsaamdetect.nbin...
CVE-2014-0623
Cross-site scripting XSS vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" issue...
CVE-2014-0623
CVE-2014-0623 is an XSS vulnerability in EMC RSA Authentication Manager 7.1 before SP4 Patch 32, specifically in the Self-Service Console related to a cross-frame scripting issue. The underlying issue allows an attacker to inject arbitrary script/HTML via unspecified vectors. Technical details ac...
CVE-2014-0623
Cross-site scripting XSS vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" issue...
EMC RSA Authentication Manager crossframe scripting
Self-Service Console cross frame scripting...
ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability
ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...
Cisco IPS Authentication Manager Denial of Service Vulnerability (CSCuf20148)
A vulnerability in the web framework of Cisco IPS Software could allow an unauthenticated, remote attacker to cause MainApp to hang intermittently due to the authentication manager process creating a denial of service DoS condition. The vulnerability is due to improper handling of user tokens. An...
Cisco IPS Authentication Manager Denial of Service Vulnerability
A vulnerability in the web framework of Cisco IPS Software could allow an unauthenticated, remote attacker to cause MainApp to hang intermittently due to the authentication manager process creating a denial of service DoS condition. The vulnerability is due to improper handling of user tokens. An...
CVE-2013-5497
The authentication manager process in the web framework in Cisco Intrusion Prevention System IPS does not properly handle user tokens, which allows remote attackers to cause a denial of service intermittent MainApp hang via a crafted management-interface connection request, aka Bug ID CSCuf20148...
CVE-2013-5497
The authentication manager process in the web framework in Cisco Intrusion Prevention System IPS does not properly handle user tokens, which allows remote attackers to cause a denial of service intermittent MainApp hang via a crafted management-interface connection request, aka Bug ID CSCuf20148...
ESA-2013-052: RSA(r) Authentication Manager Sensitive Information Disclosure Vulnerability
ESA-2013-052.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-052: RSA® Authentication Manager Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2013-052 CVE Identifier: CVE-2013-3273 Severity Rating: CVSS v2 Base Score: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected Products:...
CVE-2013-3273
EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file...
Design/Logic Flaw
EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file...
CVE-2013-3273
Vulnerability CVE-2013-3273 affects RSA Authentication Manager 8.0 prior to Patch 2 and 7.1 prior to Service Pack 4 Patch 26 (including Appliance 3.0). The issue is that when using the SDK to develop custom applications and with trace logging set to verbose, the administrative account password ca...