CVE-2011-2741

EMC RSA Adaptive Authentication On-Premise Security Restriction Bypass via Device Recovery and Identification

Title source: llm
STIX 2.1

Description

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to bypass intended security restrictions on a (1) previously non-registered device or (2) registered device by sending unspecified "data elements."

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026420
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/520850

Scores

EPSS 0.0022
EPSS Percentile 43.9%

Details

CWE
CWE-264
Status published
Products (1)
emc/rsa_adaptive_authentication_on-premise 6.0.2.1 sp1_patch2 (5 CPE variants)
Published Dec 14, 2011
Tracked Since Feb 18, 2026