9.3

CVE-2011-2740

EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.

Data is provided by the National Vulnerability Database (NVD)
EmcRsa Key Manager Appliance Version2.7 Updatesp1
   MozillaFirefox Version4.0
   MozillaFirefox Version4.0 Updatebeta1
   MozillaFirefox Version4.0 Updatebeta10
   MozillaFirefox Version4.0 Updatebeta11
   MozillaFirefox Version4.0 Updatebeta12
   MozillaFirefox Version4.0 Updatebeta2
   MozillaFirefox Version4.0 Updatebeta3
   MozillaFirefox Version4.0 Updatebeta4
   MozillaFirefox Version4.0 Updatebeta5
   MozillaFirefox Version4.0 Updatebeta6
   MozillaFirefox Version4.0 Updatebeta7
   MozillaFirefox Version4.0 Updatebeta8
   MozillaFirefox Version4.0 Updatebeta9
   MozillaFirefox Version4.0.1
   MozillaFirefox Version5.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.51% 0.872
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C