CVE-2002-0507 in Exchange

Riassunto

di MITRE

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Divulgazione: 12/08/2002
• Moderazione: accettato
• Voce: VDB-18563
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 4.0 (VulDB)
• EPSS: 0.02217
• KEV: no
• Attività: molto basso
• Settore: Government, Chemical, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0507
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0507
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0507/