VULNERABILITY INTELLIGENCE

CVE-2014-0643

CVSS score7.6 HIGH
EPSS probability2.35%
CISA KEVNot currently listed
Published2014-05-16
Last modified2026-06-17
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.

Weakness classification

  • CWE-287: Improper Authentication

Primary references