CVE

Id
71928  
CVE No.
CVE-2014-4631  
Status
Candidate  
Description
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent device binding even when authentication fails, which allows remote attackers to bypass authentication.  
Phase
Assigned (20140624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682511 71928 CVE-2014-4631 BUGTRAQ:20141202 ESA-2014-160: RSA Adaptive Authentication (On-Premise) Authentication Bypass Vulnerability  View
682512 71928 CVE-2014-4631 URL:http://www.securityfocus.com/archive/1/archive/1/534136/100/0/threaded  View
682513 71928 CVE-2014-4631 BID:71423  View
682514 71928 CVE-2014-4631 URL:http://www.securityfocus.com/bid/71423  View
682515 71928 CVE-2014-4631 SECTRACK:1031297  View
682516 71928 CVE-2014-4631 URL:http://www.securitytracker.com/id/1031297  View
682517 71928 CVE-2014-4631 XF:rsa-adaptive-cve20144631-sec-bypass(99086)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18657 JVNDB-2014-007532 EMC Documentum Web Development Kit におけるフィッシング攻撃を実行される脆弱性 EMC Documentum Web Development Kit (WDK) は、Webtop コンポーネントに関連する特定のパラメータの乱数を適切に生成しないため、フィッシング攻撃を実行される脆弱性が存在します。 CVE-2014-4639 71928 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007532.html  View