EMC RSA NetWitness prior to 9.8.5.19 and RSA Security Analytics prior to 10.2.4 and 10.3.x prior to 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote malicious users to bypass authentication by leveraging knowledge of a valid account name.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
emc rsa netwitness |
||
emc rsa security analytics |
Vulmon