CVE-2006-4991: RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicio...

Security readout for executives and security teams

This issue affects RSA Keon Certificate Authority Manager audit logging. A privileged local user could alter CA auditor logs in ways the documented integrity checks may not detect, potentially hiding improper certificate authority activity. It matters most where KeonCA still protects trust anchors or archived CA evidence. Exposure appears limited to RSA Keon Certificate Authority Manager 6.5.1 and 6.6 deployments, especially systems where local administrators or operators can access CA log files. The bundle provides no CPEs or broader affected product list. Prioritize if KeonCA still supports production or legally important CA operations. The vulnerability does not prove remote compromise, but it weakens the evidence trail for one of the most sensitive trust systems in an organization. Mitigation focus: Check RSA/vendor archives for official remediation or upgrade guidance for KeonCA 6.5.1 and 6.6.; Restrict local privileged access on CA Manager and log server hosts.; Export CA audit logs to protected external or immutable storage..

Prepared

Jun 29, 2026, 10:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.