CVE-2014-0643

HIGH · CVSS 7.6 EPSS 2.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-05-16 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-0643

Severity

HIGH

CVSS

7.6

EPSS

2.35%

Original Filing — NVD Description

EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.