CVE-2017-14377

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-29 · updated 2026-06-17
Weakness: CWE-287

Description

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass.

Affected products

Dell EMC RSA Authentication Agent for Web for IIS, RSA Authentication Agent for Web for Apache Web Server: 8.0, 8.0.1

References

http://seclists.org/fulldisclosure/2017/Nov/46
http://www.securityfocus.com/bid/101980
http://www.securitytracker.com/id/1039876
http://seclists.org/fulldisclosure/2017/Nov/46
http://www.securityfocus.com/bid/101980
http://www.securitytracker.com/id/1039876

Get alerted when CVE-2017-14377 or the next vulnerability affects your stack