CVE-2015-6851

Description

EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector.

References

http://www.securitytracker.com/id/1034510

http://www.securityfocus.com/bid/79646

http://seclists.org/bugtraq/2015/Dec/115

http://packetstormsecurity.com/files/135013/RSA-SecurID-Web-Agent-Authentication-Bypass.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS