CVE-2002-0712: Low severity Entrust Entrust Authority Security Manager vulnerability
Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0712?
CVE-2002-0712 is a moderate severity vulnerability due to improper authorization requirements for password changes.
How do I fix CVE-2002-0712?
To mitigate CVE-2002-0712, ensure that multiple master user approvals are required for password changes.
What versions of Entrust Authority Security Manager are affected by CVE-2002-0712?
CVE-2002-0712 affects Entrust Authority Security Manager versions 5.0 and 6.0.
What risks does CVE-2002-0712 pose?
CVE-2002-0712 poses risks by allowing a master user to perform unauthorized operations due to insufficient validation.
Is there a workaround for CVE-2002-0712?
A possible workaround for CVE-2002-0712 is to implement heightened internal controls around master user account management.