Lucene search

[email protected]CVE-2015-6851

HistoryDec 23, 2015 - 3:59 a.m.

CVE-2015-6851

2015-12-2303:59:02

CWE-284

[email protected]

web.nvd.nist.gov

emc

rsa

securid

web agent

cve-2015-6851

privacy-screen bypass

dom inspector

nvd

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

6.5 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

44.5%

JSON

EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector.

Affected configurations

NVD

Node

rsasecurid_web_agentRange≤7.2.1

CPENameOperatorVersion
rsa:securid_web_agentrsa securid web agentle7.2.1

CPE	Name	Operator	Version
rsa:securid_web_agent	rsa securid web agent	le	7.2.1

References

packetstormsecurity.com/files/135013/RSA-SecurID-Web-Agent-Authentication-Bypass.html

seclists.org/bugtraq/2015/Dec/115

www.securityfocus.com/bid/79646

www.securitytracker.com/id/1034510

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

6.5 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

44.5%

JSON

Related for CVE-2015-6851

nvd1 cvelist1 prion1