« Volver al listado

CVE-2012-2281

Estado: ModificadaMedia (6.8)—

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

RSA — Access Manager AgentRSA — Access Manager Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-2281",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.2,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-05T14:55:02.247",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0037.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1027220",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0037.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1027220",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "EMC RSA Access Manager Server v6.x antes de v6.1 SP4 y RSA Access Manager Agent no validan correctamente las credenciales después de un cierre de sesión, lo que podría permitir a atacantes remotos para realizar ataques de repetición a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:41:16.940",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:rsa:access_manager_agent:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA7DAF54-2358-47E1-A53F-346015547C1A"
            },
            {
              "criteria": "cpe:2.3:a:rsa:access_manager_server:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF7733DA-50FD-4688-B981-4F77D734F639"
            },
            {
              "criteria": "cpe:2.3:a:rsa:access_manager_server:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C5BA71D-0AF8-4530-ADF1-DB4DA8C47D9B"
            },
            {
              "criteria": "cpe:2.3:a:rsa:access_manager_server:6.1:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7912021C-02E3-492E-B269-8E0C839D93C8"
            },
            {
              "criteria": "cpe:2.3:a:rsa:access_manager_server:6.1:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04B01065-FD70-47E8-A094-4A6F87852198"
            },
            {
              "criteria": "cpe:2.3:a:rsa:access_manager_server:6.1:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "372FCAE3-0A73-4EFB-B2CD-271FDBC8F405"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}