Lucene search
HistoryMay 16, 2014 - 11:11 a.m.
CVE-2014-0643
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.3%
EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.
Affected configurations
Node
emcrsa_netwitnessRange<9.8.5.19
ORemcrsa_security_analyticsRange10.2–10.2.4
ORemcrsa_security_analyticsRange10.3–10.3.2
Related
prion
prion
Authentication flaw
2014-05-16 11:11:00
cvelist
cvelist
CVE-2014-0643
2014-05-16 10:00:00
securityvulns
securityvulns
cve
cve
CVE-2014-0643
2014-05-16 11:11:59
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.3%
Related for NVD:CVE-2014-0643