CVE-2013-3280 Information

Description

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash.

Reference

http://archives.neohapsis.com/archives/bugtraq/2013-10/0115.html