RSA Key Manager Appliance Session Handling Local Security Bypass Vulnerability
BID:50519
Info
RSA Key Manager Appliance Session Handling Local Security Bypass Vulnerability
| Bugtraq ID: | 50519 |
| Class: | Unknown |
| CVE: |
CVE-2011-2740 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 03 2011 12:00AM |
| Updated: | Nov 03 2011 12:00AM |
| Credit: | [email protected] |
| Vulnerable: |
RSA Security Key Manager Appliance 2.7 Service Pack 1 |
| Not Vulnerable: |
RSA Security Key Manager Appliance 2.7.1.6 |
Discussion
RSA Key Manager Appliance Session Handling Local Security Bypass Vulnerability
RSA Key Manager Appliance is prone to a security-bypass vulnerability.
An attacker with physical access to an affected computer can exploit this issue to gain unauthorized access to a previous session. Successful exploits may lead to other attacks.
RSA Key Manager Appliance 2.7 Service Pack 1 is vulnerable; other versions may also be affected.
RSA Key Manager Appliance is prone to a security-bypass vulnerability.
An attacker with physical access to an affected computer can exploit this issue to gain unauthorized access to a previous session. Successful exploits may lead to other attacks.
RSA Key Manager Appliance 2.7 Service Pack 1 is vulnerable; other versions may also be affected.
Exploit / POC
RSA Key Manager Appliance Session Handling Local Security Bypass Vulnerability
An attacker with physical access to an affected computer can exploit this issue.
An attacker with physical access to an affected computer can exploit this issue.
Solution / Fix
RSA Key Manager Appliance Session Handling Local Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
RSA Key Manager Appliance Session Handling Local Security Bypass Vulnerability
References:
References: