CVE-2002-0712 Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that requir...
LowCVSS 2.1
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entrust authority security manager | = 5.0 | No fix listed |
| entrust authority security manager | = 6.0 | No fix listed |
References
- VU#720017 patch third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource
- 7284 patch vdb-entry vendor-advisory
- easm-multiple-authorization-bypass(11724) vdb-entry