« Volver al listado

CVE-2011-2733

Estado: ModificadaAlta (7.5)—

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally used authentication information and unspecified other session information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — RSA Adaptive Authentication On-premise

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2733",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 8.5,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-08-18T23:55:00.710",
  "references": [
    {
      "url": "http://securityreason.com/securityalert/8344",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/519346/100/0/threaded",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/49574",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://securityreason.com/securityalert/8344",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/519346/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/49574",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally used authentication information and unspecified other session information."
    },
    {
      "lang": "es",
      "value": "EMC RSA Adaptive Authentication On-Premise (AAOP) v6.0.2.1 SP1 Patch2, SP1 Patch3, SP2, SP2 Patch1 y Service Pack 3 no impide la reutilización de la información de autenticación durante una sesión, lo que permite eludir las restricciones de acceso, a usuarios remotos autenticados, a través de vectores relacionados con el conocimiento de la información de autenticación utilizado originalmente y con información de sesión no especificada."
    }
  ],
  "lastModified": "2026-06-16T23:31:53.653",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F97E490D-12E8-420C-990E-2BB4B97D86D1"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E18C647-3264-46A0-8411-4DB02E470217"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30CE0F82-18A5-4E1F-B096-8A85AF85F4C4"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2_patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "250D48AB-3B67-402F-AE85-DF8B12E10D32"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "504CA1D2-9915-4ABF-9D08-C8ED5F86F34A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com",
  "evaluatorSolution": "Per: http://www.securityfocus.com/archive/1/archive/1/519346/100/0/threaded\r\n\r\n\r\nWe strongly recommend that RSA customers should obtain the following hot fixes:\r\n\r\nRSA AAOP 6.0.2.1 SP1 Patch 2 customers should obtain Hotfix 430 from SecurCare Online.\r\n\r\nRSA AAOP 6.0.2.1 SP1 Patch 3 customers should obtain Hotfix 130 from SecurCare Online.\r\n\r\nRSA AAOP 6.0.2.1 SP2 customers should obtain Hotfix 360 from SecurCare Online.\r\n\r\nRSA AAOP 6.0.2.1 SP2 Patch 1 customers should obtain Hotfix 140 from SecurCare Online.\r\n\r\nRSA AAOP 6.0.2.1 SP3 customers should obtain Hotfix 130 from SecurCare Online.\r\n"
}