VULNERABILITY INTELLIGENCE
CVE-2012-2281
CVSS score6.8 MEDIUM
EPSS probability0.68%
CISA KEVNot currently listed
Published2012-07-05
Last modified2026-06-16
CVSS vectorAV:A/AC:H/Au:N/C:C/I:C/A:C
Description
EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors.
Weakness classification
- CWE-287: Improper Authentication