RSA SecurID Bypass Vulnerability in Microsoft Outlook Web Access (OWA)

CVE-2002-0507 · LOW Severity

AV:L/AC:L/AU:N/C:N/I:P/A:N

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.

Learn more about our Web App Pen Testing.