Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/720017 | Patch Third Party Advisory US Government Resource |
http://www.securityfocus.com/bid/7284 | Patch Vendor Advisory |
http://www.kb.cert.org/vuls/id/AAMN-5KKVXC | US Government Resource |
https://exchange.xforce.ibmcloud.com/vulnerabilities/11724 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-02-02 21:00
Updated : 2017-07-10 18:29
NVD link : CVE-2002-0712
Mitre link : CVE-2002-0712
JSON object : View
CWE
Products Affected
entrust
- entrust_authority_security_manager