Unscored severity · published Aug 18, 2011
CVE-2011-2733
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a…
–
CVSS
1.3%
EPSS
No
On KEV
Description
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally used authentication information and unspecified other session information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Rsa Adaptive Authentication On-premise · Emc
6.0.2.1; 6.0.2.1; 6.0.2.1; 6.0.2.1; 6.0.2.1 · source: NVD
Affected product
RA
Rsa Adaptive Authentication On-premise
Emc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2733
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2733
securityreason.com
http://securityreason.com/securityalert/8344
www.securityfocus.com
http://www.securityfocus.com/archive/1/519346/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/49574
More from Rsa Adaptive Authentication On-premise
5.4
CVE-2016-0925
Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before…
–
CVE-2014-4631
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters…
–
CVE-2014-0638
Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML…
–
CVE-2014-0637
Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote…
–
CVE-2012-4611
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML…