Information Disclosure in RSA enVision by RSA Security

CVE-2011-2736

What is CVE-2011-2736?

Certain versions of RSA enVision prior to the service pack 4 P3 release inadvertently expose sensitive administrative credentials in cleartext within Task Escalation email messages. This flaw allows unauthorized individuals to capture sensitive information by monitoring network traffic or accessing the mailbox of a recipient. As a result, attackers can gain unauthorized insight into administrative control, potentially compromising the security of the entire system.

References