Unscored severity · published Sep 25, 2012
CVE-2012-2287
The authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP and Windows Server 2003, when an unspecified configuration…
–
CVSS
2.7%
EPSS
No
On KEV
Description
The authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP and Windows Server 2003, when an unspecified configuration exists, allows remote authenticated users to bypass an intended token-authentication step, and establish a login session to a remote host, by leveraging Windows credentials for that host.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Rsa Authentication Agent · Emc
7.1 · source: NVD
RA
Rsa Authentication Client · Emc
3.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2287
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2287
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2012-09/0102.html
www.securityfocus.com
http://www.securityfocus.com/bid/55662
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/78802
More from Rsa Authentication Agent
–
CVE-2013-3280
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access…
–
CVE-2013-3271
EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent…
–
CVE-2013-0942
Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache,…