CVE-2013-0931

Medium

Description

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration.

SeverityMedium
CVSS5.4
Exploit probability—
ProductRsa Authentication Agent For Windows
PublishedMar 5, 2013
First seenMar 5, 2013

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
rsa authentication_agent_for_windows7.1, 7.1.1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.