RSA Access Manager Server Session Replay Security Bypass Vulnerability
BID:54301
Info
RSA Access Manager Server Session Replay Security Bypass Vulnerability
| Bugtraq ID: | 54301 |
| Class: | Design Error |
| CVE: |
CVE-2012-2281 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 04 2012 12:00AM |
| Updated: | Jul 04 2012 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
RSA Access Manager Server Session Replay Security Bypass Vulnerability
RSA Access Manager Server is prone to a security-bypass vulnerability.
Successful exploits may allow attackers to hijack web sessions or bypass authentication through a replay attack and gain access to a victim's email account.
RSA Access Manager Server is prone to a security-bypass vulnerability.
Successful exploits may allow attackers to hijack web sessions or bypass authentication through a replay attack and gain access to a victim's email account.
Exploit / POC
RSA Access Manager Server Session Replay Security Bypass Vulnerability
An attacker can carry out this attack using readily available network utilities.
An attacker can carry out this attack using readily available network utilities.
Solution / Fix
RSA Access Manager Server Session Replay Security Bypass Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
RSA Access Manager Server Session Replay Security Bypass Vulnerability
References:
References:
- RSA Homepage (RSA Security)