CVE-2011-2740 EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers...
HighCVSS 9.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc rsa key manager appliance | = 2.7-sp1 | No fix listed |
References
- 8529 third-party-advisory
- 20111103 ESA-2011-035: RSA, The Security Division of EMC, announces the release of Hotfix 6 with security updates for RSA Key Manager Appliance 2.7 Service Pack 1 mailing-list
- 1026276 vdb-entry