CVE-2013-0941

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-22 · updated 2026-06-16
Weakness: CWE-310

Description

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.

Affected products

RSA Authentication Agent: through 6.1.3
RSA Authentication Api: through 8.1
RSA Pluggable Authentication Module Agent: through 6.0
RSA Securid Web Agent: through 5.3.4

References

Get alerted when CVE-2013-0941 or the next vulnerability affects your stack