Tracker / CVE-2013-0941
CVE-2013-0941
Low 2.1
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
Affected products and versions
| rsa | authentication_agent · … → 6.1.3 |
|---|---|
| rsa | authentication_api · … → 8.1 |
| rsa | pluggable_authentication_module_agent · … → 6.0 |
| rsa | securid_web_agent · … → 5.3.4 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.