Skip to main content

Rsa CVE-2012-0400

HIGH
Improper Authentication (CWE-287)
2012-03-20 security_alert@emc.com
7.9
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
7.9 HIGH
AV:A/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Adjacent
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C

Lifecycle Timeline

1
CVE Published
Mar 20, 2012 - 15:55 cve.org
HIGH 7.9

DescriptionCVE.org

EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

AnalysisAI

EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Rated high severity (CVSS 7.9). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Affected products include: Rsa Envision. Version information: before 4.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Rsa

View all
CVE-2018-1247 HIGH POC
7.1 May 08

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability

CVE-2017-14377 CRITICAL
9.8 Nov 29

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Ser

CVE-2016-1494 MEDIUM POC
5.3 Jan 13

The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a sm

CVE-2024-47856 CRITICAL
9.8 Nov 24

In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the

CVE-2019-3758 CRITICAL
9.8 Sep 18

RSA Archer, versions prior to 6.6 P2 (6.6.0.2), contain an improper authentication vulnerability. Rated critical severit

CVE-2019-3725 CRITICAL
9.8 May 15

RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable

CVE-2012-0402 CRITICAL
9.3 Mar 20

EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attacke

CVE-2014-4627 HIGH
8.8 Nov 07

SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote authenticated users to exec

CVE-2022-30584 HIGH
8.8 May 26

Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Improper Access Control Vulnerability within SSO ADFS functionali

CVE-2020-5335 HIGH
8.8 May 04

RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability. Rated high severity

CVE-2019-3724 HIGH
8.8 May 15

RSA Netwitness Platform versions prior to 11.2.1.1 is vulnerable to an Authorization Bypass vulnerability. Rated high se

CVE-2018-11060 HIGH
8.8 Jul 24

RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. Rated high severit

Share

CVE-2012-0400 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy