Session Replay Vulnerability in EMC RSA Access Manager Server and Agent

CVE-2012-2281

What is CVE-2012-2281?

The EMC RSA Access Manager Server versions prior to 6.1 SP4 and the RSA Access Manager Agent exhibit a critical flaw in their session token validation process following logout. This vulnerability permits remote attackers to potentially exploit session tokens, enabling them to execute replay attacks and gain unauthorized access to user sessions. Exploitation occurs through various unspecified vectors, highlighting the necessity of implementing robust session management protocols to mitigate risk.

References