Description
Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations.
References
- VU#720017 third-party-advisory
- easm-multiple-authorization-bypass(11724) vdb-entry
- http://www.kb.cert.org/vuls/id/AAMN-5KKVXC
- 7284 vdb-entry