{"id":"CVE-2018-1234","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-1234","generatedAt":"2026-10-28T21:21:37.432Z","title":"RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users.","description":"RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users. The attacker with local access to the system can exploit this vulnerability to read configuration properties for the authentication agent.","published":"2018-03-30T21:29:02.000Z","lastModified":"2026-06-17T01:50:47.000Z","status":"Modified","sourceIdentifier":"security_alert@emc.com","cvss":{"version":"3.0","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-200"],"affected":["rsa/authentication agent for web"],"epss":{"score":0.00436,"percentile":0.37729,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://seclists.org/fulldisclosure/2018/Mar/60","tags":["Mailing List","Third Party Advisory"],"source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1040577","tags":["Third Party Advisory","VDB Entry"],"source":"security_alert@emc.com"},{"url":"http://seclists.org/fulldisclosure/2018/Mar/60","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1040577","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-1234","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}