Auth bypass in EMC Rsa Adaptive Authentication On-Premise
CVE-2011-2733
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally used authentication information and unspecified other session information.
Vulnerability class: Broken Authentication
EPSS: 0.013 (67.3th percentile) — read the EPSS interpretation.
Affected products
- Emc Rsa_adaptive_authentication_on-premise — versions 6.0.2.1
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (vdb-entry, x_refsource_BID)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (x_refsource_SREASON, third-party-advisory)