Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveDellCVE-2012-2281
HistoryJul 05, 2012 - 2:55 p.m.

CVE-2012-2281

2012-07-0514:55:02
CWE-287
dell
web.nvd.nist.gov
22
emc
rsa
access manager
server
6.x
6.1
sp4
agent
session tokens
logout
replay attacks
cve-2012-2281
nvd

CVSS2

6.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

67.7%

JSON

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors.

Affected configurations

Nvd
Node
rsaaccess_manager_agent
OR
rsaaccess_manager_serverMatch6.0
OR
rsaaccess_manager_serverMatch6.1
OR
rsaaccess_manager_serverMatch6.1sp1
OR
rsaaccess_manager_serverMatch6.1sp2
OR
rsaaccess_manager_serverMatch6.1sp3
VendorProductVersionCPE
rsaaccess_manager_agent*cpe:2.3:a:rsa:access_manager_agent:*:*:*:*:*:*:*:*
rsaaccess_manager_server6.0cpe:2.3:a:rsa:access_manager_server:6.0:*:*:*:*:*:*:*
rsaaccess_manager_server6.1cpe:2.3:a:rsa:access_manager_server:6.1:*:*:*:*:*:*:*
rsaaccess_manager_server6.1cpe:2.3:a:rsa:access_manager_server:6.1:sp1:*:*:*:*:*:*
rsaaccess_manager_server6.1cpe:2.3:a:rsa:access_manager_server:6.1:sp2:*:*:*:*:*:*
rsaaccess_manager_server6.1cpe:2.3:a:rsa:access_manager_server:6.1:sp3:*:*:*:*:*:*

Related

securityvulns 1
prion 1
cvelist 1
nvd 1
securityvulns
securityvulns
ESA-2012-026: RSA Access Manager Session Replay Vulnerability
2012-07-09 00:00:00
prion
prion
Design/Logic Flaw
2012-07-05 14:55:00
cvelist
cvelist
CVE-2012-2281
2012-07-05 14:00:00
nvd
nvd
CVE-2012-2281
2012-07-05 14:55:02

CVSS2

6.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

67.7%

JSON
Related for CVE-2012-2281
securityvulns1prion1cvelist1nvd1