CVE-2013-0941 - CVE House
Back to Database
Status published Low CVE-2013-0941

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent...

Vulnerability Description

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-0941

Credits & Attribution

No credits recorded in the NVD database.

References

More from rsa

View All →
CVE-2022-47529
Insecure Win32 memory objects in Endpoint Windows Agents in RSA...
Medium 6.7
CVE-2022-37318
Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain...
High 7
CVE-2022-37317
Archer Platform 6.x before 6.11 P3 contain an HTML injection...
High 7.6
CVE-2022-37316
Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper...
Medium 6.5
CVE-2022-30585
The REST API in Archer Platform 6.x before 6.11 (6.11.0.0)...
Medium 6.5

Affected Vendor

Affected Software

authentication api, securid web agent, pluggable authentication module agent, authentication agent
Vulnerable Versions:
0

Timeline

Official Publish: May 22nd, 2013
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.