CVEvulnerability

CVE-2014-0643

7.6 HIGH Published 2014-05-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.

Affected configurations

• emc rsa netwitness (< 9.8.5.19) • emc rsa security analytics (>= 10.2 < 10.2.4) • emc rsa security analytics (>= 10.3 < 10.3.2)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References