Information disclosure in Rsa Access Manager Server

CVE-2010-3018

RSA Access Manager Server 5.5.3 before 5.5.3.172, 6.0.4 before 6.0.4.53, and 6.1 before 6.1.2.01 does not properly perform cache updates, which allows remote attackers to obtain sensitive information via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.

Affected products

Rsa Access_manager_server — versions 6.0.4, 5.5.3, 6.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)