What is CVE-2013-0941?

CVE-2013-0941 is a vulnerability in Apache HTTP Server, classified under Cryptographic Issues. Published 2013-05-22.

Is CVE-2013-0941 known to be exploited?

5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Apache HTTP Server

CVE-2013-0941

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.013 (67.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

Public proof-of-concept exploits

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2013-0941?: CVE-2013-0941 is a vulnerability in Apache HTTP Server, classified under Cryptographic Issues. Published 2013-05-22.
Is CVE-2013-0941 known to be exploited?: 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.