CVE-2017-14377

—

CVSS 3.0

9.8 critical

EPSS

3%p87

Published

Nov 29, 2017 (Nov 29, 2017)

Modified

Jun 17, 2026

Description

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass.

Vendors: rsa
Products: authentication agent for web
Weakness: CWE-287
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news1 stories

RSA Authentication SDK affected by two critical vulnerabilities, patch it now!

Security AffairsDec 4, 08:15 UTC · Dec 4, 2017Vulnerability CVE-2017-14377 CVE-2017-14378