← Back

CVE-2002-0507

nvd nist
Published: Aug 12, 2002Modified: Apr 16, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.

Affected (9)

Microsoft
1 product
Exchange Server
Rsa
1 product
Securid
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Exchange Server
Version 2000
Exchange Server
Version 2000 sp1
Exchange Server
Version 2000 sp2
Exchange Server
Version 5.5
Exchange Server
Version 5.5 sp1
Exchange Server
Version 5.5 sp2
Exchange Server
Version 5.5 sp3
Exchange Server
Version 5.5 sp4
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Securid
Version 5.0

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

Source: cve@mitre.org
Third Party AdvisoryVDB EntryVendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB EntryVendor Advisory

Timeline

No history available yet.