RSA NetWitness and RSA Security Analytics each contain a security fix for an authentication bypass vulnerability that could potentially be exploited to compromise the affected system. When PAM for Kerberos is enabled, an attacker can authenticate to the vulnerable system with a valid user name and without specifying a password. This issue does not affect other authentication methods. Affected include RSA NetWitness 9.8.5.17 or earlier, RSA Security Analytics 10.2.3 or earlier, and RSA Security Analytics 10.3.1 or earlier.
d3f0302f886f8021bdd615864411b0ed7d4b6997261f55f2e98ac35a06fcd19f
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed