RSA Keyon Manager audit functionality bypass
Published:		21.09.2006
Source:		BUGTRAQ
SecurityVulns ID:		6640
Type:		local
Level:		5/10
Description:		Log records blocks are independently signed, making it possible to remove whole block without notice. Records are collected locally before being signed and sent to server, making it possible to tamper log entries.

Affected:

RSA : Keyon Manager 6.6

Original document

Konstantin Gavrilenko, [Full-disclosure] RSA Keyon Log verification bypass vulnerability (21.09.2006)

Discuss:

Read or add your comments to this news (0 comments)