Unscored severity · published May 22, 2013
CVE-2013-0941
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before…
–
CVSS
1.3%
EPSS
No
On KEV
Description
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Authentication Agent · Rsa
through 6.1.3 · source: NVD
AA
Authentication Api · Rsa
through 8.1 · source: NVD
PA
Pluggable Authentication Module Agent · Rsa
through 6.0 · source: NVD
SW
Securid Web Agent · Rsa
through 5.3.4; through 5.3.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0941
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0941
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-05/0064.html
More from Authentication Agent
–
CVE-2008-2026
Cross-site scripting (XSS) vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258, and other versions before 5.3.3.378, allows remote attackers to inject…
–
CVE-2008-2027
Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when accessed via certain browsers such as Mozilla Firefox, allows…