CVE-2010-3321 | BDVDB-2026-43511 Detail

Description#

RSA Authentication Client 2.0.x, 3.0, and 3.5.x before 3.5.3 does not properly handle a SENSITIVE or NON-EXTRACTABLE tag on a secret key object that is stored on a SecurID 800 authenticator, which allows local users to bypass intended access restrictions and read keys via unspecified PKCS#11 API requests.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12010-10-07Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.