CVE-2011-2736
RSA enVision 4.x < 4 SP4 P3 - Cleartext Credential Exposure in Task Escalation Emails
Title source: llmDescription
RSA enVision 4.x before 4 SP4 P3 places cleartext administrative credentials in Task Escalation e-mail messages, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to a recipient mailbox.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/519395/100/0/threaded
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/8350
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1025979
Scores
EPSS
0.0123
EPSS Percentile
65.4%
Details
CWE
CWE-310
Status
published
Products (1)
rsa/envision
4.0 sp1 (3 CPE variants)
Published
Aug 25, 2011
Tracked Since
Feb 18, 2026