Shell
CVE-2014-6271
Shellshock Vulnerability
EMC CONFIDENTIAL ? SUBJECT TO NON-DISCLOSURE AGREEMENT/CONFIDENTIALITY PROVISIONS IN LICENSE AGREEMENT
Issue: GNU Bash versions 1.14.0 through 4.3 are indicated to be vulnerable to Bash bug Vulnerability (CVE-2014-6271).
References:
NVD:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7169
Resolution: RSA is aware of this issue and working with product organizations to investigate the issue and identify any impact. The impact of this vulnerability on RSA products may vary depending on the affected product.
This table will be updated as additional information becomes available.
|
RSA Product Name |
Versions |
Impact |
Additional Information |
|
3D Secure |
ALL Supported |
Remediated |
Hosting environment patched |
|
Access Manager |
ALL Supported |
No Impact |
|
|
Adaptive Authentication Hosted |
ALL Supported |
Remediated |
Hosting environment patched |
|
Adaptive Authentication On Prem |
ALL Supported |
No Impact |
|
|
Archer |
ALL Supported |
No Impact |
|
|
Archer Vulnerability & Risk Manager (VRM) |
ALL Supported |
Impacted |
Remediation under investigation |
|
Authentication Manager Software Platform |
5.x,6.x,7.x |
No Impact |
|
|
Authentication Manager Appliance |
3.0,8.0,8.1 |
Remediated | |
|
Authentication Manager Express |
1.0 |
Remediated | |
|
Aveksa On-Prem |
ALL Supported |
Remediated | |
|
Aveksa Hosted |
ALL Supported |
No Impact |
|
|
AveksaStealthAUDIT |
No Impact |
|
|
|
BSAFE |
ALL Supported |
No Impact |
|
|
Data Loss Protection |
ALL Supported |
Remediated | |
|
Data Protection Manager |
ALL Supported |
IMPACTED |
Remediation under investigation |
|
Digital Certificate Server |
ALL Supported |
No Impact |
|
|
ECAT |
ALL Supported |
No Impact |
|
|
enVision |
ALL Supported |
No Impact |
|
|
Federated Identity Manager |
ALL Supported |
No Impact |
|
|
FraudAction |
ALL Supported |
Remediated |
|
|
Netwitness Concentrator |
9.8.x |
Remediated | |
|
Netwitness Decoder |
9.8.x |
Remediated | |
|
Netwitness Broker |
9.8.x |
Remediated | |
|
Netwitness Informer |
1.x |
No Impact |
|
|
RSA Live Infrastructure |
ALL Supported |
Remediated |
|
|
SecurID 700 Hardware Token |
ALL Supported |
No Impact |
|
|
SecurID 800 Hardware Token |
ALL Supported |
No Impact |
|
|
SecurID Agent for PAM |
ALL Supported |
No Impact |
|
|
SecurID Agent for UNIX |
ALL Supported |
No Impact |
|
|
SecurID Agent for Web |
ALL Supported |
No Impact |
|
|
SecurID Agent for Windows |
ALL Supported |
No Impact |
|
|
SecurID Authentication Engine |
ALL Supported |
No Impact |
|
|
SecurID Authentication SDK |
ALL Supported |
No Impact |
|
|
SecurID Software Token Converter |
ALL Supported |
No Impact |
|
|
SecurID Software Token for Android |
ALL Supported |
No Impact |
|
|
SecurID Software Token for Blackberry |
ALL Supported |
No Impact |
|
|
SecurID Software Token for Desktop |
ALL Supported |
No Impact |
|
|
SecurID Software Token for iPhone |
ALL Supported |
No Impact |
|
|
SecurID Software Token for Windows Mobile |
ALL Supported |
No Impact |
|
|
SecurID Software Token Toolbar |
ALL Supported |
No Impact |
|
|
SecurID Software Token Web SDK |
ALL Supported |
No Impact |
|
|
SecurID Transaction SigningSDK |
ALL Supported |
No Impact |
|
|
Security Analytics Platform Physical and Virtual Appliances |
10.0.x-10.4.x
|
Remediated | |
|
Security Analytics Malware Analytics |
10.0.x-10.4.x |
Remediated |
|
|
Security Analytics (Windows Legacy Collector) |
10.0.x-10.4.x |
No Impact |
|
|
Security Analytics Warehouse (DCA ? Pivotal) |
|
No Impact |
|
|
Security Analytics Warehouse (MapR) |
|
Remediated | |
|
Spectrum |
1.x |
Remediated | |
|
Web Threat Detection (Silvertail) |
ALL Supported |
No Impact |
|
Related Articles
CVE-2021-41617 Security vulnerability for RSA Authentication Manager 8.6.x Number of Views Spring-related vulnerabilities for RSA Authentication Manager Number of Views Best practices for running vulnerability scans against RSA Authentication Manager 8.x Number of Views KCA Apache web server showing security vulnerability with scan due patch level/version Number of Views CERT/CC Vulnerability Note VU#144389: Potential Impact on RSA Products Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device SecurID Tokens How to implement SAML SSO Authentication with Microsoft Azure Active Directory and RSA Identity Governance & Lifecycle Do TCP Agent using API ver. 8.5 & 8.6 need a new sdconf.rec file after a new Primary is promoted? RSA Authentication Manager 8.9 Patches and Hotfixes Readme
