CVE-2002-0507

No fix known EPSS 2%

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.

Published 2002-06-11 · CVE record · OSV

Products: microsoft exchange_server