CVE-2014-4631

First published: Mon Dec 08 2014(Updated: )

RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent device binding even when authentication fails, which allows remote attackers to bypass authentication.

Credit: security_alert@emc.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/weakness
• agent/last-modified-date
• agent/tags
• agent/description
• agent/event
• agent/author
• agent/first-publish-date
• agent/source
• vendor/emc
• canonical/emc rsa adaptive authentication on-premise
• version/emc rsa adaptive authentication on-premise/6.0.2.1
• version/emc rsa adaptive authentication on-premise/6.0.2.1-sp1_patch2
• version/emc rsa adaptive authentication on-premise/6.0.2.1-sp1_patch3
• version/emc rsa adaptive authentication on-premise/6.0.2.1-sp2
• version/emc rsa adaptive authentication on-premise/6.0.2.1-sp2_patch1
• version/emc rsa adaptive authentication on-premise/6.0.2.1-sp3
• version/emc rsa adaptive authentication on-premise/6.0.2.1-sp3_p3
• version/emc rsa adaptive authentication on-premise/7.0
• version/emc rsa adaptive authentication on-premise/7.1
• version/emc rsa adaptive authentication on-premise/7.1-p2