Vulnerabilities > RSA > Authentication Client > 3.5.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2010-10-07 | CVE-2010-3321 | Permissions, Privileges, and Access Controls vulnerability in RSA Authentication Client 2.0/3.0/3.5.1 RSA Authentication Client 2.0.x, 3.0, and 3.5.x before 3.5.3 does not properly handle a SENSITIVE or NON-EXTRACTABLE tag on a secret key object that is stored on a SecurID 800 authenticator, which allows local users to bypass intended access restrictions and read keys via unspecified PKCS#11 API requests. | 1.5 |