CVE-2011-2733

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-08-18 · updated 2026-06-16
Weakness: CWE-287

Description

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the originally used authentication information and unspecified other session information.

Affected products

EMC Rsa Adaptive Authentication On-Premise: 6.0.2.1-sp1_patch2, 6.0.2.1-sp1_patch3, 6.0.2.1-sp2, 6.0.2.1-sp2_patch1, 6.0.2.1-sp3

References

http://securityreason.com/securityalert/8344
http://www.securityfocus.com/archive/1/519346/100/0/threaded
http://www.securityfocus.com/bid/49574
http://securityreason.com/securityalert/8344
http://www.securityfocus.com/archive/1/519346/100/0/threaded
http://www.securityfocus.com/bid/49574

Get alerted when CVE-2011-2733 or the next vulnerability affects your stack