CVE-2013-3280

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash.

Score

CVSS 2.0 7.5 High

Status

Modified - security_alert@emc.com

Published

2013-10-25

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Rsa Authentication Agent (Emc)

References

• http://archives.neohapsis.com/archives/bugtraq/2013-10/0115.html