#VU17897 Unprotected storage of credentials in RSA Authentication Manager


Published: 2019-03-04

Vulnerability identifier: #VU17897

Vulnerability risk: Low

CVSSv3.1: 5.1 [CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2019-3711

CWE-ID: CWE-256

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
RSA Authentication Manager
Web applications / Remote management & hosting panels

Vendor: RSA

Description

The vulnerability allows a privileged user to obtain domain admin credentials.

The vulnerability exists due to insecure storage of credentials. The  Operations Console administrator can obtain the value of a domain password that another Operations Console administrator had set previously.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

RSA Authentication Manager: 6.0 - 8.4

External links
http://seclists.org/fulldisclosure/2019/Mar/5

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Information disclosure in EMC RSA Authentication Manager