EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2014-05/0052.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-05-16 04:11
Updated : 2018-12-12 08:27
NVD link : CVE-2014-0643
Mitre link : CVE-2014-0643
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
emc
- rsa_netwitness
- rsa_security_analytics