CVE-2020-15001

CVE-2020-15001 affects Yubico YubiKey 5 NFC, specifically firmware versions 5.0.0–5.2.6 and 5.3.0–5.3.1. The OTP application allows optional access codes on OTP slots, but the access code is not checked when updating NFC-specific OTP configurations. As a result, an attacker could read configured ...

PT-2020-14110

Name of the Vulnerable Software and Affected Versions Yubico YubiKey 5 NFC devices versions 5.0.0 through 5.2.6 Yubico YubiKey 5 NFC devices versions 5.3.0 through 5.3.1 Description An information leak was discovered in the OTP application, which allows users to set optional access codes on OTP...

CVE-2020-15001: Missing Authorization

An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code is not checked whe...