CVE-2013-3280

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-25 · updated 2026-06-16
Weakness: CWE-264

Description

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash.

Affected products

EMC Rsa Authentication Agent: 7.1, 7.1.1

References

http://archives.neohapsis.com/archives/bugtraq/2013-10/0115.html
http://archives.neohapsis.com/archives/bugtraq/2013-10/0115.html

Get alerted when CVE-2013-3280 or the next vulnerability affects your stack