Multiple RSA Products Authentication Bypass Vulnerability

Bugtraq ID:	55662
Class:	Unknown
CVE:	CVE-2012-2287
Remote:	Yes
Local:	No
Published:	Sep 24 2012 12:00AM
Updated:	Sep 24 2012 12:00AM
Credit:	Reported by the vendor
Vulnerable:
Not Vulnerable:

Multiple RSA Products Authentication Bypass Vulnerability

Multiple RSA Products are prone to an authentication-bypass vulnerability

Successful exploits may allow attackers to bypass certain security restrictions and gain unauthorized privileged access.

RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 are vulnerable; others may also be affected.

Multiple RSA Products Authentication Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple RSA Products Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Multiple RSA Products Authentication Bypass Vulnerability

References:

• RSA Homepage (RSA Security)
  
• ESA-2012-037: RSA(r) Authentication Agent 7.1 for Microsoft Windows(r) and RSA(r (EMC)