CVE-2024-35311

2024-05-2916:15:10

[email protected]

web.nvd.nist.gov

yubikey

security key

yubikey bio

fips

incorrect access control

cve-2024-35311

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access Control.

References

www.yubico.com/support/security-advisories/ysa-2024-02/