CVE-2013-0941

published 2013-05-22

CVE-2013-0941: EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and…

Priority P4 9 low 2.1 CVSS 2.0

AV L AC L Au N C P I N A N

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
rsa	authentication_agent	<= 6.1.3	—
rsa	authentication_api	<= 8.1	—
rsa	pluggable_authentication_module_agent	<= 6.0	—
rsa	securid_web_agent	<= 5.3.4	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-310