rsa access manager agent vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

EMC RSA Access Manager Server 6.x prior to 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote malicious users to conduct replay attacks via unspecified vectors.

Rsa Access Manager Server 6.1 Rsa Access Manager Agent Rsa Access Manager Server 6.0

5.7

CVSSv2

Unspecified vulnerability in RSA Access Manager Agent 4.7.1 prior to 4.7.1.7, when RSA Adaptive Authentication Integration is enabled, allows remote malicious users to bypass authentication and obtain sensitive information via unknown vectors.

Rsa Access Manager Agent 4.7.1

7.5

CVSSv2

Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote malicious users to execute arbitrary code via crafted chunked-encoding data.

Rsa Securid Web Agent 5 Rsa Securid Web Agent 5.2 Rsa Securid Web Agent 5.3

NA

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to retrieve an RSA private key. This vulnerability is due to a l...

Cisco Adaptive Security Appliance Software Cisco Firepower Threat Defense

1 Github repository

NA

A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco ASA 5506-X, ASA 5508-X, and ASA 5516-X Firewalls c...

Cisco Adaptive Security Appliance Cisco Firepower Threat Defense

5

CVSSv2

A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user t...

Cisco Firepower Threat Defense Cisco Adaptive Security Appliance Device Manager

5

CVSSv2

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curv...

Openssl Openssl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Santricity Smi-s Provider -Netapp Storagegrid -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Cloud Volumes Ontap Mediator -Netapp A250 Firmware -Netapp 500f Firmware -Fedoraproject Fedora 34 Fedoraproject Fedora 36 Tenable Nessus Mariadb Mariadb Nodejs Node.js

10 Github repositories

4.3

CVSSv2

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...

5 Github repositories1 Article

5

CVSSv2

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...

Openssl Openssl 1.0.1j

4.3

CVSSv2

The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 prior to 1.0.2a allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to...

Openssl Openssl 1.0.2

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook