VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 9, 2013· Updated Jun 17, 2026

CVE-2013-6180

CVE-2013-6180

Description

EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent.

Affected products

6
  • EMC Corporation/Rsa Netwitness Nextgenllm-fuzzy2 versions
    9.8+ 1 more
    • (no CPE)range: 9.8
    • cpe:2.3:a:emc:rsa_netwitness_nextgen:9.8:*:*:*:*:*:*:*
  • EMC Corporation/Rsa Security Analyticsllm-fuzzy4 versions
    10.x before 10.3+ 3 more
    • (no CPE)range: 10.x before 10.3
    • cpe:2.3:a:emc:rsa_security_analytics:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_security_analytics:10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_security_analytics:10.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.