KLA10304 LPE vulnerability in RSA SecurID Software Token

An untrusted path vulnerability was found in the RSA SecurID Software Token. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack.

Original advisories

Related products

RSA-SecurID-Software-Token

CVE list

CVE-2011-4141 critical

Solution

Update to latest version

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• EMC RSA SecurID Software Token 4.1 versions 4.1.0.545 and earlier