CVE-2014-0643

EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password…

published May 16, 2014

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02350 · 83.5th percentile
Published
2014-05-16T10:00Z
EPSS history
Timeline
  • 16 MAY 10:00Z
    EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password…
    cvelistv5