CVE-2011-2742
Summary
| CVE | CVE-2011-2742 |
|---|---|
| State | PUBLISHED |
| Assigner | dell |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-12-14 11:55:06 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile device. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:M/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Emc | Rsa Adaptive Authentication On-premise | 6.0.2.1 | sp1_patch2 | All | All |
| Application | Emc | Rsa Adaptive Authentication On-premise | 6.0.2.1 | sp1_patch3 | All | All |
| Application | Emc | Rsa Adaptive Authentication On-premise | 6.0.2.1 | sp2 | All | All |
| Application | Emc | Rsa Adaptive Authentication On-premise | 6.0.2.1 | sp2_patch1 | All | All |
| Application | Emc | Rsa Adaptive Authentication On-premise | 6.0.2.1 | sp3 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| RSA Adaptive Authentication Bugs Let Remote Users Bypass Certain Security Controls - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.