Unscored CVE-2013-0931 EUVD-2013-0942GHSA-fqxq-278j-7x3g

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically p…

Published Mar 5, 2013 · Updated Sep 16, 2024 · Assigned by dell

Description

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration.

References

20130228 ESA-2013-012: RSA Authentication Agent 7.1.1 for Microsoft Windows Access Control Vulnerability mailing-list