CVE-2017-14378

EUVD-2017-5881 · Published Nov 29, 2017

EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."

Technologies

Emc Rsa Authentication Agent Api For CEmc Rsa Authentication Agent Sdk For C

CVSS scores

v3.010.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://seclists.org/fulldisclosure/2017/Nov/48
http://www.securityfocus.com/bid/101979
http://www.securitytracker.com/id/1039877

Potentially impacted assets

See if this affects your attack surface