CVE-2013-6180: Medium severity EMC RSA NetWitness NextGen vulnerability
EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6180?
CVE-2013-6180 is classified as a critical vulnerability due to the potential for unauthorized access to sensitive data.
How do I fix CVE-2013-6180?
To fix CVE-2013-6180, upgrade to RSA Security Analytics version 10.3 or later, or RSA NetWitness NextGen version 9.8 or later.
What are the affected versions for CVE-2013-6180?
The affected versions for CVE-2013-6180 include RSA Security Analytics 10.0, 10.1, 10.2, and RSA NetWitness NextGen 9.8.
Can CVE-2013-6180 be exploited remotely?
Yes, CVE-2013-6180 can be exploited remotely by attackers to gain unauthorized access.
What kind of attack does CVE-2013-6180 allow?
CVE-2013-6180 allows attackers to bypass intended access restrictions by sending unauthorized Core requests.