PT-2011-4052
CVE-2011-2740
·
Published
2011-11-09
·
Updated
2012-02-17
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
EMC RSA Key Manager (RKM) Appliance versions 2.7 SP1 through 2.7.1.5
Description
The issue arises when using Firefox 4.x or 5.0 with the EMC RSA Key Manager (RKM) Appliance, where a user session is not properly terminated upon logout, potentially allowing remote attackers to execute arbitrary code on an unattended workstation.
Recommendations
For EMC RSA Key Manager (RKM) Appliance versions 2.7 SP1 through 2.7.1.5, update to version 2.7.1.6 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾