CVE-2014-4631

Published: Dec 8, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent device binding even when authentication fails, which allows remote attackers to bypass authentication.

Affected (10)

Products: Emc: Rsa Adaptive Authentication On Premise

Emc

1 product

Rsa Adaptive Authentication On Premise

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Emc Rsa Adaptive Authentication On Premise	Version 6.0.2.1
Emc Rsa Adaptive Authentication On Premise	Version 6.0.2.1 sp1_patch2
Emc Rsa Adaptive Authentication On Premise	Version 6.0.2.1 sp1_patch3
Emc Rsa Adaptive Authentication On Premise	Version 6.0.2.1 sp2
Emc Rsa Adaptive Authentication On Premise	Version 6.0.2.1 sp2_patch1
Emc Rsa Adaptive Authentication On Premise	Version 6.0.2.1 sp3
Emc Rsa Adaptive Authentication On Premise	Version 6.0.2.1 sp3_p3
Emc Rsa Adaptive Authentication On Premise	Version 7.0
Emc Rsa Adaptive Authentication On Premise	Version 7.1
Emc Rsa Adaptive Authentication On Premise	Version 7.1 p2