CVE-2010-3018

2022-10-0316:20:55

CWE-200

[email protected]

web.nvd.nist.gov

cve-2010-3018

rsa access manager

security vulnerability

information disclosure

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.3%

JSON

RSA Access Manager Server 5.5.3 before 5.5.3.172, 6.0.4 before 6.0.4.53, and 6.1 before 6.1.2.01 does not properly perform cache updates, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected configurations

NVD

Node

rsaaccess_manager_serverMatch5.5.3

rsaaccess_manager_serverMatch6.0.4

rsaaccess_manager_serverMatch6.1

CPENameOperatorVersion
rsa:access_manager_serverrsa access manager servereq5.5.3
rsa:access_manager_serverrsa access manager servereq6.0.4
rsa:access_manager_serverrsa access manager servereq6.1

CPE	Name	Operator	Version
rsa:access_manager_server	rsa access manager server	eq	5.5.3
rsa:access_manager_server	rsa access manager server	eq	6.0.4
rsa:access_manager_server	rsa access manager server	eq	6.1