CVE-2017-8006

Dashboard / Vulnerabilities / CVE-2017-8006

CVE-2017-8006

Summary:

Details: In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute force attack to attempt to identify that user's PIN. The malicious user could potentially reset the compromised PIN to affect victim's ability to obtain access to protected resources.

References: , http://www.securitytracker.com/id/1038879, http://seclists.org/fulldisclosure/2017/Jul/23, http://www.securityfocus.com/bid/99554