Vulnerabilities > EMC > RSA Security Sitekey > Critical

DATE CVE VULNERABILITY TITLE RISK
2007-04-30 CVE-2006-7200 Security Bypass vulnerability in Rsa Security Sitekey
EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication by stealing and replaying a token.
network
low complexity
emc
critical
9.0
2007-04-30 CVE-2006-7201 Remote Security vulnerability in Rsa Security Sitekey
EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the token via HTTP.
network
emc
critical
9.3