CVE-2017-8006: emc rsa_authentication_manager Improper Authentication

Vulnerability summary

CVE-2017-8006 is a medium (CVSS 5.9) Improper Authentication vulnerability in emc rsa_authentication_manager. EPSS estimates a 2.13% chance of exploitation in the next 30 days, higher than 81.6% of scored vulnerabilities.

Timeline

1. 17-07-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute force attack to attempt to identify that user's PIN. The malicious user could potentially reset the compromised PIN to affect victim's ability to obtain access to protected resources.

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.