EUVD-2010-3020

Malware in sbrugna...

EUVD-2010-3019

Malware in sbrugna...

EUVD-2014-0677

Malware in sbrugna...

EUVD-2012-2274

Malware in sbrugna...

EUVD-2011-0348

Malware in sbrugna...

CVE-2010-3017

Unspecified vulnerability in RSA Access Manager Agent 4.7.1 before 4.7.1.7, when RSA Adaptive Authentication Integration is enabled, allows remote attackers to bypass authentication and obtain sensitive information via unknown vectors...

CVE-2010-3018

RSA Access Manager Server 5.5.3 before 5.5.3.172, 6.0.4 before 6.0.4.53, and 6.1 before 6.1.2.01 does not properly perform cache updates, which allows remote attackers to obtain sensitive information via unspecified vectors...

EMC RSA Access Manager Detection (Windows)

Binary data emcrsaaccessmanagerinstalled.nbin...

EMC RSA Access Manager Information Disclosure (ESA-2014-029)

The remote Windows host is running a version of EMC RSA Access Manager that is reportedly affected by an information disclosure vulnerability if the logging level is set to INFO. This could result in passwords being logged in plaintext. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2014-0646

The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files...

Design/Logic Flaw

The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files...

CVE-2014-0646

The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files...

CVE-2014-0646

CVE-2014-0646 affects EMC RSA Access Manager Server components where, when INFO logging is enabled, local users can read log files to discover cleartext passwords. Affected versions include RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6....

PT-2014-3741

Name of the Vulnerable Software and Affected Versions EMC RSA Access Manager versions 6.1.3 through 6.1.3.38 EMC RSA Access Manager versions 6.1.4 through 6.1.4.21 EMC RSA Access Manager versions 6.2.0 through 6.2.0.10 EMC RSA Access Manager versions 6.2.1 through 6.2.1.02 Description The issue...

ESA-2014-029: RSA® Access Manager Sensitive Information Disclosure Vulnerability

ESA-2014-029.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-029: RSA® Access Manager Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2014-029 CVE Identifier: CVE-2014-0646 Severity Rating: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected Products: · RSA Access Manager Server...

CVE-2014-0646: Undefined Security Weakness

The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files...

ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability

EMC Identifier: ESA-2013-029 CVE Identifier: CVE-2013-0941 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected Products: RSA Authentication API versions prior to 8.1 SP1 RSA Web Agent for Apache Web Server versions prior to 5.3.5 RSA Web Agent for IIS versions prior to...

ESA-2012-026: RSA Access Manager Session Replay Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-026: RSA Access Manager Session Replay Vulnerability EMC Identifier: ESA-2012-026 CVE Identifier: CVE-2012-2281 Severity Rating: CVSSv2 Base Score: 6. 8 AV:A/AC:H/Au:N/C:C/I:C/A:C Affected Products: RSA Access Manager Server version 6.0.x RSA...

CVE-2012-2281

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors...

PT-2012-3920

Name of the Vulnerable Software and Affected Versions EMC RSA Access Manager Server versions prior to 6.1 SP4 EMC RSA Access Manager Agent affected versions not specified Description The issue is related to improper validation of session tokens after a logout, which could allow remote attackers t...