Lucene search

K
cveDellCVE-2012-2279
HistoryJul 13, 2012 - 9:55 p.m.

CVE-2012-2279

2012-07-1321:55:02
CWE-20
dell
web.nvd.nist.gov
36
cve-2012-2279
open redirect
emc
rsa authentication manager
rsa securid
vulnerability
security
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

57.7%

Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected configurations

Nvd
Node
emcrsa_authentication_managerRange7.1sp4
OR
emcrsa_authentication_managerMatch7.0
OR
emcrsa_authentication_managerMatch7.1
OR
emcrsa_authentication_managerMatch7.1sp3
OR
rsaauthentication_managerMatch7.1sp42
Node
rsasecurid_applianceMatch2.0
OR
rsasecurid_applianceMatch2.0.1
OR
rsasecurid_applianceMatch2.0.2
OR
rsasecurid_applianceMatch3.0
OR
rsasecurid_applianceMatch3.0sp2
OR
rsasecurid_applianceMatch3.0sp3
OR
rsasecurid_applianceMatch3.0sp4
VendorProductVersionCPE
emcrsa_authentication_manager*cpe:2.3:a:emc:rsa_authentication_manager:*:sp4:*:*:*:*:*:*
emcrsa_authentication_manager7.0cpe:2.3:a:emc:rsa_authentication_manager:7.0:*:*:*:*:*:*:*
emcrsa_authentication_manager7.1cpe:2.3:a:emc:rsa_authentication_manager:7.1:*:*:*:*:*:*:*
emcrsa_authentication_manager7.1cpe:2.3:a:emc:rsa_authentication_manager:7.1:sp3:*:*:*:*:*:*
rsaauthentication_manager7.1cpe:2.3:a:rsa:authentication_manager:7.1:sp42:*:*:*:*:*:*
rsasecurid_appliance2.0cpe:2.3:a:rsa:securid_appliance:2.0:*:*:*:*:*:*:*
rsasecurid_appliance2.0.1cpe:2.3:a:rsa:securid_appliance:2.0.1:*:*:*:*:*:*:*
rsasecurid_appliance2.0.2cpe:2.3:a:rsa:securid_appliance:2.0.2:*:*:*:*:*:*:*
rsasecurid_appliance3.0cpe:2.3:a:rsa:securid_appliance:3.0:*:*:*:*:*:*:*
rsasecurid_appliance3.0cpe:2.3:a:rsa:securid_appliance:3.0:sp2:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

57.7%

Related for CVE-2012-2279