MEDIUM🇵🇱 Wersja polska

CVE-2013-6180

CVSS 6.8v2.0pub. 2013-12-09upd. 2026-04-29

EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent.

CVSS Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Emc Rsa Netwitness Nextgen

    APP
    Emc
    9.8

  • Emc Rsa Security Analytics

    APP
    Emc
    10.010.110.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-11061CRITICAL9.1ten sam produkt

RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vul...

CVE-2014-0643HIGH7.6ten sam produkt

EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Ker...

CVE-2016-8215MEDIUM6.1ten sam produkt

EMC RSA Security Analytics 10.5.3 and 10.6.2 contains fixes for a Reflected Cross-Site Scripting vulnerability...

CVE-2018-15764CRITICAL9.8ten sam vendor

Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to impro...

CVE-2018-1245CRITICAL9.0ten sam vendor

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnera...