Vulnerability in Microsoft Windows 2003 Server
CVE-2013-0931
EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration.
EPSS: 0.005 (42.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2003_server
- Microsoft Windows_xp
- Rsa Authentication_agent_for_windows — versions 7.1, 7.1.1
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)