CVE-2002-0507

Published Aug 12, 2002

Last updated 5 years ago

Overview

Description: An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 2.1
Impact score: 2.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-287

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B4F9C143-4734-4E5D-9281-F51513C5CAAF"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EC01670D-4550-4034-86A5-7879B6334241"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B80A57A1-7B9F-4C07-ADAA-DBC4687F1EFC"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E3983529-F4E3-4883-97AF-5BFC87AC3E86"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FF429469-1B63-4BF3-A59F-F8180226BB6D"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "34300FD4-EC3B-4206-B6C0-1345F17EC5EA"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "47132D0D-7691-40A3-A4BF-37D2ACE580C3"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:rsa:securid:5.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A00A9D51-90B1-4D58-839F-AD93AD015B80"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References