CVE-2018-1234

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe…

published March 30, 2018

CVSS
—
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to read configuration properties for the authentication agent.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00436 · 36.6th percentile
Published
2018-03-30T21:00Z
EPSS history
Timeline
  • 30 MAR 21:00Z
    RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe…
    cvelistv5