ByteOS Network

NVD Vulnerability Details :

CVE-2013-0931

Deferred

Source-security_alert@emc.com

Published At-05 Mar, 2013 | 22:03

Updated At-11 Apr, 2025 | 00:51

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.4	MEDIUM	AV:A/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

RSA Security LLC

>>authentication_agent_for_windows>>7.1

cpe:2.3:a:rsa:authentication_agent_for_windows:7.1:*:*:*:*:*:*:*

RSA Security LLC

>>authentication_agent_for_windows>>7.1.1

cpe:2.3:a:rsa:authentication_agent_for_windows:7.1.1:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_2003_server>>*

cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-16	Primary	nvd@nist.gov

Evaluator Description

Per http://archives.neohapsis.com/archives/bugtraq/2013-03/att-0001/ESA-2013-012.txt "Affected Products: Product: RSA Authentication Agent for Microsoft Windows version 7.1 and 7.1.1 Platforms: Windows XP and Windows 2003"

References

Hyperlink	Source	Resource
http://archives.neohapsis.com/archives/bugtraq/2013-03/0001.html	security_alert@emc.com	N/A
http://archives.neohapsis.com/archives/bugtraq/2013-03/0001.html	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History