CVE-2020-10185

🗓️ 05 Mar 2020 23:13:15Reported by mitreType

The sync endpoint in YubiKey Validation Server before 2.40 allows replay of an OTP

Reporter	Title	Published	Views	Family All 11
Prion	Default configuration	5 Mar 202023:15	–	prion
Cvelist	CVE-2020-10185	5 Mar 202022:48	–	cvelist
OSV	CVE-2020-10185	5 Mar 202023:15	–	osv
OSV	yubikey-val - security update	13 Mar 202000:00	–	osv
Debian CVE	CVE-2020-10185	5 Mar 202023:15	–	debiancve
UbuntuCve	CVE-2020-10185	5 Mar 202000:00	–	ubuntucve
NVD	CVE-2020-10185	5 Mar 202023:15	–	nvd
OpenVAS	Debian: Security Advisory (DLA-2141-1)	18 Mar 202000:00	–	openvas
Yubico	Security advisory YSA-2020-01 \| Yubico	7 Jan 202000:00	–	yubico
Debian	[SECURITY] [DLA 2141-1] yubikey-val security update	12 Mar 202020:46	–	debian

Nvd

Node

yubico yubikey_one_time_password_validation_serverRange<2.40

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2020/03/msg00014.html
github	www.github.com/Yubico/yubikey-val/releases/tag/yubikey-val-2.40
yubico	www.yubico.com/support/security-advisories/ysa-2020-01/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Mar 2020 23:15Current

8.2High risk

Vulners AI Score8.2

CVSS26.8

CVSS38.6

EPSS0.007

CWE-294