NVD

Id
32589  
Name
CVE-2014-4631  
Description
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent device binding even when authentication fails, which allows remote attackers to bypass authentication.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-12-08  
Modified Date
2014-12-08  
Seq
2014-4631  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171665 32589 CVE-2014-4631 20141202 ESA-2014-160: RSA Adaptive Authentication (On-Premise) Authentication Bypass Vulnerability  View
171666 32589 CVE-2014-4631 71423  View
171667 32589 CVE-2014-4631 1031297  View
171668 32589 CVE-2014-4631 rsa-adaptive-cve20144631-sec-bypass(99086)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16964 JVNDB-2014-005839 RSA Adaptive Authentication における認証を回避される脆弱性 RSA Adaptive Authentication (On-Premise) は、Challenge SOAP コールでデバイスバインドを使用する、または Out-of-Band Phone (Authentify) 機能を備えた RSA Adaptive Authentication Integration Adapters を使用する場合、認証失敗した場合でも恒久的なデバイス接続を行うため、認証を回避される脆弱性が存在します。 CVE-2014-4631 71920 CVE-2014-4631 32589 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005839.html 2014-12-02 2014-12-10 View