EMC Adaptive Authentication Data Elements Security Bypass Vulnerability

Bugtraq ID:	51067
Class:	Unknown
CVE:	CVE-2011-2742
Remote:	Yes
Local:	No
Published:	Dec 13 2011 12:00AM
Updated:	Dec 13 2011 12:00AM
Credit:	EMC
Vulnerable:	EMC Captiva 6.5 EMC Adaptive Authentication 6.0.2.1 SP3 EMC Adaptive Authentication 6.0.2.1 SP2 Patch 1 EMC Adaptive Authentication 6.0.2.1 SP2 EMC Adaptive Authentication 6.0.2.1 SP1 Patch 3
Not Vulnerable:

EMC Adaptive Authentication Data Elements Security Bypass Vulnerability

EMC Adaptive Authentication is prone to a security-bypass vulnerability.

Successful exploits may allow attackers to bypass certain security restrictions.

The following versions of EMC Adaptive Authentication are vulnerable:

6.0.2.1 SP1 Patch 2 and SP1 Patch 3
6.0.2.1 SP2 and SP2 Patch 1
6.0.2.1 SP3

EMC Adaptive Authentication Data Elements Security Bypass Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EMC Adaptive Authentication Data Elements Security Bypass Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

EMC Adaptive Authentication Data Elements Security Bypass Vulnerability

References:

• Vendor Homepage (EMC )
  
• ESA-2011-036: RSA, The Security Division of EMC, announces the release of a Sec ([email protected])