CVE-2011-2740
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
09/11/2011
Last modified:
11/04/2025
Description
EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
Impact
Base Score 2.0
9.30
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:h:emc:rsa_key_manager_appliance:2.7:sp1:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page