Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-1234

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to read configuration properties for the authentication agent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell EMC RSA Authentication Agent for Web for IIS

  • version 8.0.1 and earlieraffected

References