RSA Authentication Agent/Authentication Client access Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
RSA Security Authentication Agent for Microsoft Windows 7.x
RSA Security Authentication Client 3.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2012-2287

The RSA Authentication Agent is a software used to verify remote access requests.

The Authentication function in emc rsa Authentication Agent 7.1/RSA Authentication Client 3.5 (Windows XP and Windows Server 2003). Under specific configuration, you can use the Windows credential of the host to bypass the authentication steps of the target token to establish a logon session of the remote host.

<* Source: vendor
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

RSA Security
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.rsasecurity.com