Lucene search

K
cveDellCVE-2011-2741
HistoryDec 14, 2011 - 11:55 a.m.

CVE-2011-2741

2011-12-1411:55:06
CWE-264
dell
web.nvd.nist.gov
28
emc
rsa
aaop
security
vulnerability
bypass
cve-2011-2741

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

75.5%

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to bypass intended security restrictions on a (1) previously non-registered device or (2) registered device by sending unspecified “data elements.”

Affected configurations

Nvd
Node
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp1_patch2
OR
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp1_patch3
OR
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp2
OR
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp2_patch1
OR
emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp3
VendorProductVersionCPE
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch2:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch3:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2_patch1:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

75.5%

Related for CVE-2011-2741