Unscored CVE-2013-3280 EUVD-2013-3217GHSA-7jh5-f4m6-j6fw

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attac…

Published Oct 25, 2013 · Updated Sep 17, 2024 · Assigned by dell

Description

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash.

References

20131023 ESA-2013-067: RSA Authentication Agent for Web for Internet Information Services (IIS) Security Controls Bypass Vulnerability mailing-list