NVD

Id
29527  
Name
CVE-2014-0643  
Description
EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-05-16  
Modified Date
2014-05-16  
Seq
2014-0643  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156467 29527 CVE-2014-0643 20140512 ESA-2014-027: RSA NetWitness and RSA Security Analytics Authentication Bypass Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13644 JVNDB-2014-002519 EMC RSA NetWitness および RSA Security Analytics における認証を回避される脆弱性 EMC RSA NetWitness および RSA Security Analytics は、Kerberos PAM が有効な場合、パスワードを要求しないため、認証を回避される脆弱性が存在します。 CVE-2014-0643 68044 CVE-2014-0643 29527 7.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002519.html 2014-05-12 2014-05-19 View