Medium severity5.5NVD Advisory· Published Mar 30, 2018· Updated Jun 17, 2026
CVE-2018-1234
CVE-2018-1234
Description
RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to read configuration properties for the authentication agent.
Affected products
2- Range: <=8.0.1
- Range: version 8.0.1 and earlier
Patches
Vulnerability mechanics
References
2- seclists.org/fulldisclosure/2018/Mar/60nvdMailing ListThird Party Advisory
- www.securitytracker.com/id/1040577nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.