CVE-2017-8006 Auth bypass in RSA Authentication Manager 8.2 SP1 Patch 1 and earlier
Attackers can brute-force PINs in the Self-Service Console to reset credentials and gain unauthorized access to protected resources.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-8006?
CVE-2017-8006 is a medium-severity authentication bypass vulnerability in RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, published on 17 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute force attack to attempt to identify that user's PIN. The malicious user could potentially reset the compromised PIN to affect victim's ability to obtain access to protected resources.
Weakness: CWE-287
Which versions are affected by CVE-2017-8006?
It affects 1 product.
Products include Emc Rsa Authentication Manager.
How do I fix CVE-2017-8006?
No fix has been published for CVE-2017-8006 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-8006 being exploited?
There is no known exploitation of CVE-2017-8006 in the wild and no public exploit code.
Other vulnerabilities in RSA Authentication Manager 8.2 SP1 Patch 1 and earlier
- CVE-2019-3768 XML external entity in RSA Authentication Manager
- CVE-2018-11073 DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
- CVE-2018-1253 Stored cross-site scripting vulnerability
- CVE-2012-2279 Open redirect in n/a
- CVE-2018-11074 DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
Sources
Also known as GHSA-q6pp-hfpw-8qjc.