VU#273940: Enterprise Access Management EAM does not rotate RSA keys

T1Covered by 1 source · first reported by CERT/CC at 23 Sept, 18:22 UTC

Overview Imprivata Enterprise Access Management (EAM), an authentication and single sign-on platform for enterprise and clinical environments, contains a vulnerability in versions 26.2.6 and below. The product provides no supported mechanism to rotate its RSA key pair after deployment, meaning the…

security

Sources

• T1VU#273940: Enterprise Access Management EAM does not rotate RSA keysCERT/CC23 Sept, 18:22