Vulnerabilities > EMC > RSA Security Sitekey > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2007-04-30 | CVE-2006-7200 | Security Bypass vulnerability in Rsa Security Sitekey EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication by stealing and replaying a token. | 9.0 |
2007-04-30 | CVE-2006-7201 | Remote Security vulnerability in Rsa Security Sitekey EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the token via HTTP. | 9.3 |