CVE-2011-4143: Infoleak
Published Jan 27, 2012
·Updated
EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors.
Affected Software
5 affected components
RSA EnVision=4.0-sp1
RSA EnVision=4.0-sp2
RSA EnVision=4.0-sp3
RSA EnVision=4.0-sp4
RSA EnVision=4.1
Event History
Jan 27, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4143?
CVE-2011-4143 is considered a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2011-4143?
To fix CVE-2011-4143, upgrade your EMC RSA enVision to version 4.0 SP4 P5 or 4.1 P3 or later.
3
What systems are vulnerable to CVE-2011-4143?
Vulnerable systems include EMC RSA enVision versions 4.0 before SP4 P5 and 4.1 before P3.
4
What types of attacks can be executed via CVE-2011-4143?
CVE-2011-4143 allows remote attackers to obtain sensitive information about environment variables.
5
Is there a workaround for CVE-2011-4143?
There are no known workarounds for CVE-2011-4143; updating the software is the recommended solution.