Lucene search
MitreCVE-2002-0507HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0507
2002-08-1204:00:00
CWE-287
mitre
web.nvd.nist.gov
38
microsoft
owa
rsa securid
authentication bypass
vulnerability
cve-2002-0507
nvd
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.1
Confidence
Low
EPSS
0.043
Percentile
92.3%
An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.
Affected configurations
Node
microsoftexchange_serverMatch5.5-
ORmicrosoftexchange_serverMatch5.5sp1
ORmicrosoftexchange_serverMatch5.5sp2
ORmicrosoftexchange_serverMatch5.5sp3
ORmicrosoftexchange_serverMatch5.5sp4
ORmicrosoftexchange_serverMatch2000-
ORmicrosoftexchange_serverMatch2000sp1
ORmicrosoftexchange_serverMatch2000sp2
Node
rsasecuridMatch5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | exchange_server | 5.5 | cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:* |
| microsoft | exchange_server | 5.5 | cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:* |
| microsoft | exchange_server | 5.5 | cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:* |
| microsoft | exchange_server | 5.5 | cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:* |
| microsoft | exchange_server | 5.5 | cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:* |
| microsoft | exchange_server | 2000 | cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:* |
| microsoft | exchange_server | 2000 | cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:* |
| microsoft | exchange_server | 2000 | cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:* |
| rsa | securid | 5.0 | cpe:2.3:h:rsa:securid:5.0:*:*:*:*:*:*:* |
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.1
Confidence
Low
EPSS
0.043
Percentile
92.3%
Related for CVE-2002-0507