Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0507
microsoft
owa
rsa securid
authentication bypass
vulnerability
cve-2002-0507
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.043 Low
EPSS
Percentile
92.4%
An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.
Affected configurations
Node
microsoftexchange_serverMatch5.5-
ORmicrosoftexchange_serverMatch5.5sp1
ORmicrosoftexchange_serverMatch5.5sp2
ORmicrosoftexchange_serverMatch5.5sp3
ORmicrosoftexchange_serverMatch5.5sp4
ORmicrosoftexchange_serverMatch2000-
ORmicrosoftexchange_serverMatch2000sp1
ORmicrosoftexchange_serverMatch2000sp2
Node
rsasecuridMatch5.0
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.043 Low
EPSS
Percentile
92.4%
Related for CVE-2002-0507