RSA Access Manager Server CVE-2014-0646 Information Disclosure Vulnerability
BID:67172
Info
RSA Access Manager Server CVE-2014-0646 Information Disclosure Vulnerability
| Bugtraq ID: | 67172 |
| Class: | Design Error |
| CVE: |
CVE-2014-0646 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 30 2014 12:00AM |
| Updated: | Apr 30 2014 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
EMC RSA Access Manager Server 6.2 SP 1 EMC RSA Access Manager Server 6.2 EMC RSA Access Manager Server 6.1 SP 4 EMC RSA Access Manager Server 6.1 SP 3 |
| Not Vulnerable: |
EMC RSA Access Manager Server 6.1 SP 2 EMC RSA Access Manager Server 6.1 SP 1 EMC RSA Access Manager Server 6.1 |
Discussion
RSA Access Manager Server CVE-2014-0646 Information Disclosure Vulnerability
RSA Access Manager Server is prone to an information disclosure vulnerability.
An authenticated attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
RSA Access Manager Server versions 6.1 SP 3, 6.1 SP 4, 6.2 and 6.2 SP 1 are vulnerable.
RSA Access Manager Server is prone to an information disclosure vulnerability.
An authenticated attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
RSA Access Manager Server versions 6.1 SP 3, 6.1 SP 4, 6.2 and 6.2 SP 1 are vulnerable.
Exploit / POC
RSA Access Manager Server CVE-2014-0646 Information Disclosure Vulnerability
An attacker requires local interactive access to exploit the issue.
An attacker requires local interactive access to exploit the issue.