CVE-2014-0643

EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:emc:rsa_netwitness:*:*:*:*:*:*:*:*
cpe:2.3:a:emc:rsa_security_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:emc:rsa_security_analytics:*:*:*:*:*:*:*:*

Information

Published : 2014-05-16 04:11

Updated : 2018-12-12 08:27


NVD link : CVE-2014-0643

Mitre link : CVE-2014-0643


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

emc

  • rsa_netwitness
  • rsa_security_analytics