5.5
CVE-2018-1234
- EPSS 0.11%
- Veröffentlicht 30.03.2018 21:29:01
- Zuletzt bearbeitet 21.11.2024 03:59:26
- Quelle security_alert@emc.com
- Teams Watchlist Login
- Unerledigt Login
RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to read configuration properties for the authentication agent.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rsa ≫ Authentication Agent For Web SwPlatformapache_web_server Version <= 8.0.1
Rsa ≫ Authentication Agent For Web SwPlatformiis Version <= 8.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.11% | 0.295 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.