CVE-2011-2742

Summary: CVE-2011-2742 affects EMC RSA Adaptive Authentication On-Premise (AAOP). The issue is that AAOP 6.0.2.1 SP1 Patch 2/3, SP2/SP2 Patch 1, and SP3 does not perform forensic evaluation when device tokens are received from mobile apps, potentially allowing a mobile device to bypass applicatio...

CVE-2011-2741

CVE-2011-2741 affects EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2/3, SP2/SP2 Patch1, and SP3. The issue concerns Device Recovery and Device Identification, where certain data elements from end-user devices may allow bypassing security restrictions for both previously non...

CVE-2011-1422

CVE-2011-1422 is an XSS vulnerability in an unspecified Shockwave Flash file used by EMC RSA Adaptive Authentication On-Premise (AAOP) versions 2.x, 5.7.x and 6.x. The affected component is the Flash/Shockwave content within AAOP; the root cause is an input/validation issue allowing arbitrary web...

CVE-2012-2286

CVE-2012-2286 affects RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 prior to SP3 P3. The issue is described as an information disclosure vulnerability that could occur when calling specific components within the application. The connected advisory (ESA-2012-035) notes a fix in SP3 P3 for ...

CVE-2011-2733

CVE-2011-2733 affects EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3. Description: the system does not prevent reuse of authentication information within an active session, allowing remote authenticated users to bypass access restrict...

CVE-2014-0638

RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 are affected by Cross-Site Scripting and Cross-Frame Scripting vulnerabilities (CVE-2014-0638). The issue involves vectors using FRAME elements in the web application, enabling an attacker to inject arbitrary script or potenti...

CVE-2014-4631

Affected software : RSA Adaptive Authentication On-Premise (6.0.2.1–7.1 P3) and RSA Adaptive Authentication Integration Adapters (1.x/2.x). Issue : When a device binding is requested in a Challenge SOAP call (or via Out-of-Band Phone/Authentify adapters), permanent device binding occurs even if a...

CVE-2014-0637

CVE-2014-0637 is an XSS vulnerability in RSA Adaptive Authentication (On-Premise) back-office case-management, affecting 6.x and 7.x up to 7.1 SP0 P2. The issue allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. A fix is package 7.1 SP0 P2; RSA recommends u...

CVE-2012-4611

RSA Adaptive Authentication On-Premise (AAOP) 6.x contains cross-site scripting vulnerabilities (CVE-2012-4611) that could allow an attacker to execute scripts in the context of an authenticated user. The ESA-2012-054 advisory from RSA EMC notes a Base Score of 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) an...

CVE-2016-0925

The CVE-2016-0925 entry describes a cross-site scripting (XSS) vulnerability in the Case Management component of EMC RSA Adaptive Authentication (On-Premise). Affected versions include 6.0.2.1.SP3.P4 HF210; 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50; and 7.2.x before 7.2.0.0.SP0.P0 HF20. The issu...