What is the severity of CVE-2013-3273?

CVE-2013-3273 is classified as a medium severity vulnerability.

How do I fix CVE-2013-3273?

To mitigate CVE-2013-3273, upgrade EMC RSA Authentication Manager to versions 8.0 with patch P2 or 7.1 with service pack SP4 P26 or later.

What is the impact of exploiting CVE-2013-3273?

Exploitation of CVE-2013-3273 allows local users to access sensitive information, specifically the cleartext administrative password from trace logs.

Which versions of RSA Authentication Manager are affected by CVE-2013-3273?

CVE-2013-3273 affects RSA Authentication Manager versions 7.1 prior to SP4 P26 and 8.0 prior to P2.

Is there a workaround for CVE-2013-3273?

A recommended workaround for CVE-2013-3273 involves restricting access to the trace log files and monitoring local user permissions.

Vulnerability/
CVE-2013-3273

low

2.1

CWE

255

8/7/2013

27/3/2020

CVE-2013-3273

First published: Mon Jul 08 2013(Updated: )

EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file.

Credit: security_alert@emc.com

Affected Software	Affected Version	How to fix
EMC RSA Authentication Manager	=7.1
EMC RSA Authentication Manager	=7.1-sp2
EMC RSA Authentication Manager	=7.1-sp3
EMC RSA Authentication Manager	=8.0-p1
EMC RSA Authentication Manager	=7.1-sp1
EMC RSA Authentication Manager	=8.0

Never miss a vulnerability like this again

Reference Links

http://archives.neohapsis.com/archives/bugtraq/2013-07/0046.html

Frequently Asked Questions

What is the severity of CVE-2013-3273?
CVE-2013-3273 is classified as a medium severity vulnerability.
How do I fix CVE-2013-3273?
To mitigate CVE-2013-3273, upgrade EMC RSA Authentication Manager to versions 8.0 with patch P2 or 7.1 with service pack SP4 P26 or later.
What is the impact of exploiting CVE-2013-3273?
Exploitation of CVE-2013-3273 allows local users to access sensitive information, specifically the cleartext administrative password from trace logs.
Which versions of RSA Authentication Manager are affected by CVE-2013-3273?
CVE-2013-3273 affects RSA Authentication Manager versions 7.1 prior to SP4 P26 and 8.0 prior to P2.
Is there a workaround for CVE-2013-3273?
A recommended workaround for CVE-2013-3273 involves restricting access to the trace log files and monitoring local user permissions.

agent/severity
agent/weakness
agent/references
agent/author
agent/type
agent/event
agent/description
agent/last-modified-date
agent/softwarecombine
agent/tags
agent/first-publish-date
collector/nvd-index
agent/software-canonical-lookup-request
vendor/emc
canonical/emc rsa authentication manager
version/emc rsa authentication manager/7.1
version/emc rsa authentication manager/7.1-sp2
version/emc rsa authentication manager/7.1-sp3
version/emc rsa authentication manager/8.0-p1
vendor/rsa
version/emc rsa authentication manager/7.1-sp1
version/emc rsa authentication manager/8.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.