1.5 CVE-2010-3321

Ransomware Risk
 

RSA Authentication Client 2.0.x, 3.0, and 3.5.x before 3.5.3 does not properly handle a SENSITIVE or NON-EXTRACTABLE tag on a secret key object that is stored on a SecurID 800 authenticator, which allows local users to bypass intended access restrictions and read keys via unspecified PKCS#11 API requests.
https://nvd.nist.gov/vuln/detail/CVE-2010-3321

Categories

CWE-264

References


 

CPE

cpe start end
Configuration 1
cpe:2.3:a:rsa:authentication_client:2.0:*:*:*:*:*:*:*
cpe:2.3:a:rsa:authentication_client:3.0:*:*:*:*:*:*:*
cpe:2.3:a:rsa:authentication_client:3.5.1:*:*:*:*:*:*:*


REMEDIATION




EXPLOITS


Exploit-db.com

id description date
No known exploits

Other (github, ...)

Url
No known exploits


CAPEC


Common Attack Pattern Enumerations and Classifications

id description severity
No entry


MITRE