PT-2014-3336

Name of the Vulnerable Software and Affected Versions VASCO IDENTIKEY Authentication Server IAS version 3.4.x Description The issue allows remote authenticated users to bypass Active Directory authentication. This is done by entering only a DIGIPASS one-time password, instead of the required...

CVE-2013-7292: Improper Authentication

VASCO IDENTIKEY Authentication Server IAS 3.4.x allows remote authenticated users to bypass Active Directory AD authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password...