Vulnerability in EMC Rsa Key Manager Appliance

CVE-2011-2740

EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.

EPSS: 0.034 (87.6th percentile) — read the EPSS interpretation.

Affected products

Emc Rsa_key_manager_appliance — versions 2.7
Mozilla Firefox — versions 4.0, 4.0.1, 5.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

security_alert@emc.com (x_refsource_SREASON, third-party-advisory)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)