CVE-2013-0941
First published: Wed May 22 2013(Updated: )
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RSA Authentication API | <=8.1 | |
| RSA SecurID Web Agent | <=5.3.4 | |
| Apache HTTP Server | ||
| Microsoft Internet Information Server | ||
| Rsa Pluggable Authentication Module Agent | <=6.0 | |
| RSA Authentication Agent | <=6.1.3 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2013-0941?
CVE-2013-0941 is categorized as a high severity vulnerability due to improper encryption and weak key management.
How do I fix CVE-2013-0941?
To fix CVE-2013-0941, upgrade the affected RSA products to their respective patched versions as specified by the vendor.
Which RSA products are affected by CVE-2013-0941?
CVE-2013-0941 affects several RSA products including Authentication API prior to 8.1 SP1 and various versions of RSA Web Agent.
What kind of attack can exploit CVE-2013-0941?
CVE-2013-0941 can be exploited by attackers to gain unauthorized access to sensitive stored data due to weak encryption.
Is my version of RSA Authentication API vulnerable to CVE-2013-0941?
If you are using RSA Authentication API versions earlier than 8.1 SP1, it is vulnerable to CVE-2013-0941.
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/rsa
- canonical/rsa authentication api
- version/rsa authentication api/8.1
- canonical/rsa securid web agent
- version/rsa securid web agent/5.3.4
- vendor/apache
- canonical/apache http server
- vendor/microsoft
- canonical/microsoft internet information server
- canonical/rsa pluggable authentication module agent
- version/rsa pluggable authentication module agent/6.0
- canonical/rsa authentication agent
- version/rsa authentication agent/6.1.3
- canonical/microsoft windows