Information disclosure in Rsa Envision

CVE-2011-4143

EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.5th percentile) — read the EPSS interpretation.

Affected products

Rsa Envision — versions 4.0, 4.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)