CVE-2012-2287: emc rsa_authentication_agent Improper Authentication

Vulnerability summary

CVE-2012-2287 is a high (CVSS 8.5) Improper Authentication vulnerability in emc rsa_authentication_agent. EPSS estimates a 2.66% chance of exploitation in the next 30 days, higher than 85.4% of scored vulnerabilities.

Timeline

1. 25-09-2012
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

The authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP and Windows Server 2003, when an unspecified configuration exists, allows remote authenticated users to bypass an intended token-authentication step, and establish a login session to a remote host, by leveraging Windows credentials for that host.

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.