CVE-2011-4142

The CVE-2011-4142 issue affects EMC SourceOne Email Management’s Web Search feature (versions 6.5 prior to 6.5.2.4033; 6.6 prior to 6.6.1.2194; 6.7 prior to 6.7.2.2033). According to connected sources, the vulnerability causes cleartext credentials to be written to OS log files, enabling local us...

CVE-2011-4142

The Web Search feature in EMC SourceOne Email Management 6.5 before 6.5.2.4033, 6.6 before 6.6.1.2194, and 6.7 before 6.7.2.2033 places cleartext credentials in log files, which allows local users to obtain sensitive information by reading these files...

EMC RSA Adaptive Authentication (On-Premise) security vulnerabilities

Protection bypass is possible...

CVE-2011-4141

Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Software Token file...

CVE-2011-4141

Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Software Token file...

CVE-2011-4141

RSA SecurID Software Token for Windows (4.1 and earlier; affected 4.1.0.545 and earlier) is vulnerable to an insecure library loading/ DLL hijacking via an untrusted search path. The vulnerability allows local privilege escalation when a user opens a specially crafted Software Token file, enablin...

KLA10304 LPE vulnerability in RSA SecurID Software Token

An untrusted path vulnerability was found in the RSA SecurID Software Token. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Related products RSA-SecurID-Software-Token CVE list CVE-2011-4141...

CVE-2011-2741

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to bypass intended security restrictions on a 1 previously non-registered device or...

CVE-2011-2742

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile...

Design/Logic Flaw

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile...

CVE-2011-2742

Summary: CVE-2011-2742 affects EMC RSA Adaptive Authentication On-Premise (AAOP). The issue is that AAOP 6.0.2.1 SP1 Patch 2/3, SP2/SP2 Patch 1, and SP3 does not perform forensic evaluation when device tokens are received from mobile apps, potentially allowing a mobile device to bypass applicatio...

CVE-2011-2742

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile...

CVE-2011-2741

CVE-2011-2741 affects EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2/3, SP2/SP2 Patch1, and SP3. The issue concerns Device Recovery and Device Identification, where certain data elements from end-user devices may allow bypassing security restrictions for both previously non...

CVE-2011-2740

EMC RSA Key Manager RKM Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation...

CVE-2011-2739

The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file...

Design/Logic Flaw

The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file...

CVE-2011-2740

CVE-2011-2740 affects EMC RSA Key Manager Appliance 2.7 SP1 prior to 2.7.1.6. When using Firefox 4.x or 5.0, it does not properly terminate a user session on logout, enabling potential remote code execution via an unattended workstation. The NVD lists a high CVSSv2 base score (9.3) with network a...

CVE-2011-2739

The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file...

CVE-2011-2739

EMC Documentum eRoom contains a flaw in its file-blocking feature that allows bypassing site-wide controls. In EMC Documentum eRoom 7.3.x and 7.4.x prior to 7.4.3.g, the validation for blocked file types is insufficient, enabling remote authenticated users to upload and open arbitrary files and p...

CVE-2011-2740

EMC RSA Key Manager RKM Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation...