CVE-2013-7292

VASCO IDENTIKEY Authentication Server IAS 3.4.x allows remote authenticated users to bypass Active Directory AD authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password...

Authentication flaw

VASCO IDENTIKEY Authentication Server IAS 3.4.x allows remote authenticated users to bypass Active Directory AD authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password...

VASCO IDENTIKEY Authentication Server contains an authentication bypass vulnerability

Overview VASCO IDENTIKEY Authentication Server version 3.4.x contains an authentication bypass vulnerability which could allow an attacker to login to a system without needing the user's Active Directory password credentials. Description CWE-305: Authentication Bypass by Primary WeaknessVASCO's...

Digipass Go3不安全加密实现漏洞

Digipass GO3是一种非常轻巧和便于使用的双重认证装置，旨在向客户提供安全的一次性密码OTP。 Digipass Go3使用不安全的单密钥加密算法加密敏感数据，允许攻击者暴力猜测加密密钥，访问敏感信息。 Vasco Digipass Go3 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vasco.com/ c 2006-2006 faypou a.k.a fc / include stdio.h include stdlib.h include ctype.h include time.h include...

Digipass Go3 tokens weak encryption

Weakened implementation of 3DES is used...

Digipass Go3 Token Dumper (at least for 2006)

The initial reverse engineering of Vasco’s Digipass Go3 algorithm follows in C++. I think this implementation is a "rough" approximation, if we take some limitations about 2006 and the calculations made into account. Or I'm just joking… : This generator was able to predict an "otp" collision,...

Digipass Go3 - Insecure Encryption

Digipass Go3 - Insecure Encryption // source: https://www.securityfocus.com/bid/21040/info Digipass Go3 is prone to an insecure-encryption vulnerability because the device uses an insecure encryption algorithm to encrypt sensitive data. An attacker can exploit this issue to brute-force the...

Digipass Go3 - Insecure Encryption

// source: https://www.securityfocus.com/bid/21040/info Digipass Go3 is prone to an insecure-encryption vulnerability because the device uses an insecure encryption algorithm to encrypt sensitive data. An attacker can exploit this issue to brute-force the encryption key and gain access to...