CVE-2008-6886

Published: Aug 3, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

RSA EnVision 3.5.0, 3.5.1, 3.5.2, and 3.7.0 does not properly restrict access to unspecified user profile functionality, which allows remote attackers to obtain the administrator password hash and conduct brute force guessing attacks.

Affected (4)

Products: Rsa: Envision

Rsa

1 product

Envision

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Rsa Envision	Version 3.5.0
Rsa Envision	Version 3.5.1
Rsa Envision	Version 3.5.2
Rsa Envision	Version 3.7.0

Related CWEs

CWE-264

References (14)

http://marc.info/?l=bugtraq&m=122765140110581&w=2

Source: cve@mitre.org

Patch

http://secunia.com/advisories/32883

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/50273

Source: cve@mitre.org

http://www.secfault.org/?p=78

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/32473

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3288

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46884

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=122765140110581&w=2