Rsa Security Sitekey
Approved changes feed: RSS · Atom
cpe:2.3:a:emc:rsa_security_sitekey:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Emc (f882007a-26e9-5b42-9f2e-94a4747c4377) |
|---|---|
| Product | Rsa Security Sitekey (46457087-d47c-57ae-a9d0-ccb8eefaf3e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-7201 |
vulnerable | 2026-06-08 04:49:30.555422 |
Details available
EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the token via HTTP.
Published: 2007-04-30T23:00:00.000Z
Updated: 2024-09-16T18:54:19.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-7200 |
vulnerable | 2026-06-08 04:49:30.555096 |
Details available
EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication by stealing and replaying a token.
Published: 2007-04-30T23:00:00.000Z
Updated: 2024-09-16T22:03:12.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-7199 |
vulnerable | 2026-06-08 04:49:30.554667 |
Details available
EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle (MITM) attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is easier to monitor this attack than "attacks against static web pages."
Published: 2007-04-30T23:00:00.000Z
Updated: 2024-09-16T19:01:50.968Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.