CVE-2017-14378

CRÍTICO 10.0CVE-2017-14378 · Published 29/11/2017 · updated 17/06/2026

En resumen

CVE-2017-14378 es una vulnerabilidad CRÍTICO (CVSS 10.0) que afecta a rsa authentication agent api for c (emc), rsa authentication agent sdk for c (emc).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.0%, mayor que el 87.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
rsa authentication agent api for c emc	`= 8.5`	No fix yet
rsa authentication agent sdk for c emc	`= 8.6`	No fix yet

Description

EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."

References

seclists.org/fulldisclosure/2017/Nov/48 · Mailing List
securityfocus.com/bid/101979 · Third Party Advisory
securitytracker.com/id/1039877 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free