CVEvulnerability

CVE-2013-0941

2.1 LOW Published 2013-05-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-310

Description

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.

Affected configurations

• rsa authentication api (<= 8.1) • rsa securid web agent (<= 5.3.4) • rsa pluggable authentication module agent (<= 6.0) • rsa authentication agent (<= 6.1.3)

Related

Weakness · not in database (1)

References