CVE-2020-15000: Undefined Security Weakness

A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin PIN, Reset Code, and User PIN. The Reset Code is used to reset the User PIN, but it is disabled by default. A flaw in the implementation of OpenPGP sets the Reset Code to a known...

PT-2020-14109

Name of the Vulnerable Software and Affected Versions Yubico YubiKey 5 devices versions 5.2.0 through 5.2.6 Description A PIN management problem was discovered in Yubico YubiKey 5 devices. The issue involves OpenPGP, which has three passwords: Admin PIN, Reset Code, and User PIN. The Reset Code,...

CVE-2017-8006

CVE-2017-8006 affects EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier. The self-service console allows an authenticated remote attacker to perform brute-force attempts to identify a target user’s PIN, potentially leading to PIN disclosure and subsequent access disruption (the attacker ...

SecurityAdvisory 2015-04-14

The source code contains a logical flaw related to user PIN aka PW1 verification that allows an attacker with local host privileges and/or physical proximity NFC to perform security operations without knowledge of the user’s PIN code...