CVE-2016-0894

Published: May 3, 2016Modified: May 6, 2026

6.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.4

Source: NVD

Description

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter.

Affected (7)

Products: Emc: Rsa Data Loss Prevention

Emc

1 product

Rsa Data Loss Prevention

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Emc Rsa Data Loss Prevention	Version 9.6.1
Emc Rsa Data Loss Prevention	Version 9.6.2.1
Emc Rsa Data Loss Prevention	Version 9.6.2.2
Emc Rsa Data Loss Prevention	Version 9.6.2.3
Emc Rsa Data Loss Prevention	Version 9.6.2.4
Emc Rsa Data Loss Prevention	Version 9.6.2
Emc Rsa Data Loss Prevention	Version 9.6

Related CWEs

CWE-254

References (6)

http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html

Source: security_alert@emc.com

http://seclists.org/bugtraq/2016/May/9

Source: security_alert@emc.com

http://www.securitytracker.com/id/1035714

Source: security_alert@emc.com

http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/bugtraq/2016/May/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1035714

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.