CVE-2011-2740 : EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or

EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.

Published 2011-11-09 23:55:02

Updated 2012-02-17 04:08:00

Source Dell

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2011-2740

EMC » Rsa Key Manager Appliance » Version: 2.7 Update SP1
cpe:2.3:h:emc:rsa_key_manager_appliance:2.7:sp1:*:*:*:*:*:*
Matching versions
When used together with: Mozilla » Firefox » Version: 4.0
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta1
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta10
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta11
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta12
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta2
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta3
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta4
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta5
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta6
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta7
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta8
When used together with: Mozilla » Firefox » Version: 4.0 Update Beta9
When used together with: Mozilla » Firefox » Version: 4.0.1
When used together with: Mozilla » Firefox » Version: 5.0

Exploit prediction scoring system (EPSS) score for CVE-2011-2740

EPSS FAQ

3.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2011-2740

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2011-2740

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2011-2740

http://www.securitytracker.com/id?1026276

RSA Key Manager Appliance Session Logout Bug Fails to Terminate Sessions - SecurityTracker
http://securityreason.com/securityalert/8529

RSA Key Manager Appliance 2.7 Service Pack 1 Multiple flaws - CXSecurity.com
http://www.securityfocus.com/archive/1/520381

SecurityFocus

Jump to

Vulnerability Details : CVE-2011-2740

Products affected by CVE-2011-2740

Exploit prediction scoring system (EPSS) score for CVE-2011-2740

CVSS scores for CVE-2011-2740

CWE ids for CVE-2011-2740

References for CVE-2011-2740