Описание
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:emc:rsa_authentication_agent:7.1:*:*:*:*:*:*:*
cpe:2.3:a:emc:rsa_authentication_agent:7.1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00304
Низкий
7.5 High
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash.
EPSS
Процентиль: 53%
0.00304
Низкий
7.5 High
CVSS2
Дефекты
CWE-264