CVE-2012-0403

Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors...

CVE-2012-0402

EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors...

CVE-2012-0401

RSA enVision 4.x (EMC) contains multiple SQL injection vulnerabilities tracked as CVE-2012-0401, prior to version 4.1 Patch 4. The issue affects RSA enVision 4.x, with the root cause described as SQL injection in multiple components, permitting remote authenticated users to execute arbitrary SQL ...

CVE-2012-0402

CVE-2012-0402 affects EMC RSA enVision 4.x prior to 4.1 Patch 4, which uses unspecified hardcoded credentials that could allow a remote attacker to gain access via unknown vectors. The vulnerability is within RSA enVision’s authentication surface, with a CVSS Base Score of 9.3 (High) per NVD. Aff...

CVE-2012-0399

EMC RSA enVision 4.x is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2012-0399, present in versions prior to 4.1 Patch 4. An attacker could inject arbitrary web script or HTML via unspecified vectors, with impact limited to integrity. The documented fix is upg...

ESA-2012-014: RSA enVision Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-014: RSA enVision Multiple Vulnerabilities EMC Identifier:ESA-2012-014 CVE Identifiers: CVE-2012-0399, CVE-2012-0400, CVE-2012-0401, CVE-2012-0402, CVE-2012-0403 Severity Rating: CVSS Base Score: See below for scores for individual...

EMC RSA enVision multiple security vulnerabilities

Crossite scripting, SQL injection, directory traversal, hardcoded accounts, restrictions bypass...

PT-2012-2547

Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions 4.0 through 4.1 before Patch 4 Description The issue is related to a directory traversal vulnerability. It allows remote authenticated users to have an unspecified impact via unknown vectors. Recommendations For...

PT-2012-2545

Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions 4.0 through 4.1 before Patch 4 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions 4.0 through 4.1 before Patch 4, apply Patch 4 to resolve the issue...

PT-2012-2543

Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions prior to 4.1 Patch 4 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The exact vectors used for the injection are no...

CVE-2012-0403: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors...

PT-2012-2544

Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions 4.0 through 4.1 before Patch 4 Description The issue allows remote attackers to gain access through a brute-force attack due to improper restriction of failed authentication attempts. Recommendations For versions 4.0...

CVE-2012-0400: Improper Authentication

EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2012-0402: Undefined Security Weakness

EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors...

PT-2012-2546

Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions 4.0 through 4.1 before Patch 4 Description The issue involves unspecified hardcoded credentials in the software, making it easier for remote attackers to obtain access. Recommendations For versions 4.0 through 4.1...

CVE-2012-0399: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0401: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Innominate MGuard Weak HTTPS and SSH Keys

Overview An independent research group comprised of Nadia Heninger, Zakir Durumeric, Eric Wustrow, and J. Alex Halderman identified an insufficient entropy vulnerability in Innominate’s mGuard network appliance product line. By impersonating the device, an attacker can obtain the credentials of...

FreeBSD : OpenSSL -- CMS and S/MIME Bleichenbacher attack (60eb344e-6eb1-11e1-8ad7-00e0815b8da8)

The OpenSSL Team reports : A weakness in the OpenSSL CMS and PKCS 7 code can be exploited using Bleichenbacher's attack on PKCS 1 v1.5 RSA padding also known as the million message attack MMA. Only users of CMS, PKCS 7, or S/MIME decryption operations are affected. A successful attack needs on...

Vulnerability in OpenSSL - CMS and S/MIME Bleichenbacher attack

A weakness in the OpenSSL CMS and PKCS 7 code can be exploited using Bleichenbacher’s attack on PKCS 1 v1.5 RSA padding also known as the million message attack MMA. Only users of CMS, PKCS 7, or S/MIME decryption operations are affected, SSL/TLS applications are not affected by this issue...