Unrated severityNVD Advisory· Published Aug 25, 2011· Updated Apr 29, 2026

CVE-2011-2736

Description

RSA enVision 4.x before 4 SP4 P3 places cleartext administrative credentials in Task Escalation e-mail messages, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to a recipient mailbox.

Affected products

Rsa/Envision3 versions
cpe:2.3:a:rsa:envision:4.0:sp1:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:rsa:envision:4.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:rsa:envision:4.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:rsa:envision:4.0:sp3:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

securityreason.com/securityalert/8350nvd
www.securityfocus.com/archive/1/519395/100/0/threadednvd
www.securitytracker.com/idnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000