24 matches found
EUVD-2013-3217
Malware in sbrugna...
EUVD-2013-3208
Malware in sbrugna...
CVE-2013-0931
EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration...
CVE-2013-0942
Cross-site scripting XSS vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-3280
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash...
CVE-2013-3271
EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...
CVE-2017-14377
EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...
PT-2017-13429
Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent API version 8.5 RSA Authentication Agent SDK version 8.6 Description The issue allows attackers to bypass authentication due to an error handling problem. Recommendations For EMC RSA Authentication Agent API versio...
CVE-2017-14377: Improper Authentication
EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass...
PT-2017-13428
Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent for Web: Apache Web Server versions 8.0 through 8.0.1 prior to Build 618 Description The issue is related to a security vulnerability that could potentially lead to authentication bypass. Recommendations For EMC RS...
CVE-2017-14378: Undefined Security Weakness
EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."...
CVE-2013-3280
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash...
CVE-2013-3280: Undefined Security Weakness
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash...
PT-2013-4276
Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent versions 7.1.x through 7.1.1 Description The issue is related to a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash. Recommendations For...
CVE-2013-3271
EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...
CVE-2013-3271: Undefined Security Weakness
EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...
PT-2013-4267
Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent for PAM version 7.0 through 7.0.2.0 Description The issue makes it easier for remote attackers to discover correct login credentials via a brute-force attack because the maximum number of login attempts is enforced...
PT-2013-2736
Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Internet Information Services EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Apache Description The issue is related to a cross-site scripting XSS...
CVE-2013-0942: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
