| Package | Affected versions | Patched versions |
|---|---|---|
| rsa netwitness | < 9.8.5.19 | 9.8.5.19 |
| rsa security analytics | ≥ 10.2, < 10.2.4≥ 10.3, < 10.3.2 | 10.2.410.3.2 |
EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free