Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8xpc-fq47-wxcp

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle (MITM) attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is easier to monitor this attack than "attacks against static web pages."

EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle (MITM) attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is easier to monitor this attack than "attacks against static web pages."

EPSS

Процентиль: 78%
0.0117
Низкий

Связанные уязвимости

nvd
почти 19 лет назад

EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle (MITM) attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is easier to monitor this attack than "attacks against static web pages."

EPSS

Процентиль: 78%
0.0117
Низкий