What’s Vulnerable › Vulnerabilities

CVE-2011-2740

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-11-09 · updated 2026-06-16
• Weakness: CWE-264

Description

EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.

Affected products

• EMC Rsa Key Manager Appliance: 2.7-sp1

References

• http://securityreason.com/securityalert/8529
• http://www.securityfocus.com/archive/1/520381
• http://www.securitytracker.com/id?1026276
• http://securityreason.com/securityalert/8529
• http://www.securityfocus.com/archive/1/520381
• http://www.securitytracker.com/id?1026276

Get alerted when CVE-2011-2740 or the next vulnerability affects your stack