Unscored severity · published Apr 30, 2007
CVE-2006-7201
EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the…
–
CVSS
2.3%
EPSS
No
On KEV
Description
EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the token via HTTP.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Rsa Security Sitekey · Emc
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-7201
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-7201
www.cr-labs.com
http://www.cr-labs.com/publications/SiteKey-20060718.pdf
www.cr-labs.com
http://www.cr-labs.com/publications/WhySiteKey-20060824.pdf
More from Rsa Security Sitekey
–
CVE-2006-7199
EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle (MITM) attack in which an attacker-controlled server proxies authentication…
–
CVE-2006-7200
EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one…