CVE-2017-8006
In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute force attack to attempt to identify that user's PIN. The malicious user could potentially reset the compromised PIN to affect victim's ability to obtain access to protected resources.
- Score
- CVSS 3.0 5.9 Medium
- Status
- Modified - security_alert@emc.com
- Published
- 2017-07-17
- Last modified
- 2024-08-05
- Weaknesses
- CWE-287
Affected products
References
- http://seclists.org/fulldisclosure/2017/Jul/23
- http://www.securityfocus.com/bid/99554
- http://www.securitytracker.com/id/1038879
