Yubico YubiKey 5 NFC Information Disclosure Vulnerability

Yubico YubiKey 5 NFC is a multi-protocol secret key device supporting NFC Near Field Communication functionality from the Swedish company Yubico. An information disclosure vulnerability exists in the Yubico YubiKey 5 NFC versions 5.0.0 through 5.2.6 and 5.3.0 through 5.3.1. The vulnerability can ...

CVE-2020-15001

An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code is not checked whe...