CVE-2006-7201

CVE-2006-7201 affects EMC RSA Security SiteKey where the secure qualifier is not set on the SiteKey Flash token (PassMark Flash). This misconfiguration could allow remote attackers to obtain the token over HTTP, enabling exposure of authentication-related data. The Connected documents describe th...

CVE-2006-7199

CVE-2006-7199 describes a MITM-based exposure in EMC RSA Secur ity SiteKey where a malicious, attacker-controlled proxy can relay authentication data to and from a legitimate SiteKey server, allowing an attacker to cause the correct image to be displayed remotely. The description notes the vendor...

CVE-2006-7200

CVE-2006-7200 concerns EMC RSA Security SiteKey. The issue describes challenge-bypass tokens that persist indefinitely due to the lack of a user-facing cancellation interface, enabling attackers to bypass one authentication stage by stealing and replaying a token. The connected sources consistent...