CVE-2013-3273: Low severity EMC RSA Authentication Manager vulnerability
EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3273?
CVE-2013-3273 is classified as a medium severity vulnerability.
How do I fix CVE-2013-3273?
To mitigate CVE-2013-3273, upgrade EMC RSA Authentication Manager to versions 8.0 with patch P2 or 7.1 with service pack SP4 P26 or later.
What is the impact of exploiting CVE-2013-3273?
Exploitation of CVE-2013-3273 allows local users to access sensitive information, specifically the cleartext administrative password from trace logs.
Which versions of RSA Authentication Manager are affected by CVE-2013-3273?
CVE-2013-3273 affects RSA Authentication Manager versions 7.1 prior to SP4 P26 and 8.0 prior to P2.
Is there a workaround for CVE-2013-3273?
A recommended workaround for CVE-2013-3273 involves restricting access to the trace log files and monitoring local user permissions.