Vulnerability · Published Jul 31, 2020 · Assigned by dell
CVE-2020-5384
High 8.4
In plain English
A high-severity authentication bypass in RSA Authentication Agent for Microsoft Windows from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.4%top 66.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability. A local unauthenticated attacker could potentially exploit this vulnerability by using an alternate path to bypass authentication in order to gain full access to the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | RSA Authentication Agent for Microsoft Windows | unspecified – before 2.0.1 |
Weakness: CWE-288 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://community.rsa.com/docs/DOC-113541 x_refsource_MISC