« Back to list

CVE-2011-2737

Status: ModifiedMedium (5)—

RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability."

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

RSA — Envision

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2011-2737",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-08-25T14:22:45.087",
  "references": [
    {
      "url": "http://securityreason.com/securityalert/8350",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/519395/100/0/threaded",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1025979",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://securityreason.com/securityalert/8350",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/519395/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1025979",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an \"arbitrary file retrieval vulnerability.\""
    },
    {
      "lang": "es",
      "value": "RSA enVision v3.x y v4.x anterior a v4 SP4 P3 permite a atacantes remotos leer ficheros de su elección a través de vectores no especificados, relacionado con \"arbitrary file retrieval vulnerability.\""
    }
  ],
  "lastModified": "2026-06-16T23:31:53.990",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:rsa:envision:*:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A257195D-D324-4F3E-98EE-1BAE6841AD70",
              "versionEndIncluding": "4.0"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.3.6_build_0115:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6426C540-D2A7-494F-B2DB-834C0025CC0F"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D09DC51-1615-471B-867D-737142885FBC"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EAFAE772-8245-4AC5-AF5B-1E4F0E19661D"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "195FFEF0-BF85-427E-AB63-BEE858F36B17"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00A2B824-4429-41A6-A9EE-32A1E6D7C9CA"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:3.7.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4787120-2C46-48F3-9B65-B9736874A4B0"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:4.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08E9A94F-8EE5-499F-AD38-94B4F9FBEA31"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:4.0:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFECF4B2-3244-4BE5-A997-9C4411B549E0"
            },
            {
              "criteria": "cpe:2.3:a:rsa:envision:4.0:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "545765CA-A54D-4032-8386-B1594C983D0E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}