CVE-2012-2281

Published Jul 5, 2012

Last updated a month ago

Overview

Description
EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors.
Source
security_alert@emc.com
NVD status
Deferred

Risk scores

CVSS 2.0

Type
Primary
Base score
6.8
Impact score
10
Exploitability score
3.2
Vector string
AV:A/AC:H/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-287

Social media

Hype score
Not currently trending

Configurations