CVE-2018-1234 | BDVDB-2026-98545 Detail

Dell EMCRSA Authentication Agent for Web for IIS

Description#

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to read configuration properties for the authentication agent.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2018/Mar/60
http://www.securitytracker.com/id/1040577

Exploit#

No public exploit known

History#

Version 12018-03-30Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.