« Volver al listado

CVE-2011-2737

Estado: ModificadaMedia (5)—

RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

RSA — Envision

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2737",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-08-25T14:22:45.087",
  "references": [
    {
      "url": "http://securityreason.com/securityalert/8350",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/519395/100/0/threaded",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1025979",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://securityreason.com/securityalert/8350",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/519395/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1025979",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an \"arbitrary file retrieval vulnerability.\""
    },
    {
      "lang": "es",
      "value": "RSA enVision v3.x y v4.x anterior a v4 SP4 P3 permite a atacantes remotos leer ficheros de su elección a través de vectores no especificados, relacionado con \"arbitrary file retrieval vulnerability.\""
    }
  ],
  "lastModified": "2026-06-16T23:31:53.990",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:rsa:envision:*:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A257195D-D324-4F3E-98EE-1BAE6841AD70",
              "versionEndIncluding": "4.0"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.3.6_build_0115:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6426C540-D2A7-494F-B2DB-834C0025CC0F"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D09DC51-1615-471B-867D-737142885FBC"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EAFAE772-8245-4AC5-AF5B-1E4F0E19661D"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "195FFEF0-BF85-427E-AB63-BEE858F36B17"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00A2B824-4429-41A6-A9EE-32A1E6D7C9CA"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.7.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4787120-2C46-48F3-9B65-B9736874A4B0"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:4.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08E9A94F-8EE5-499F-AD38-94B4F9FBEA31"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:4.0:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFECF4B2-3244-4BE5-A997-9C4411B549E0"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:4.0:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "545765CA-A54D-4032-8386-B1594C983D0E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}