NVD

Id
17264  
Name
CVE-2016-0915  
Description
The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service (PIN change for an arbitrary user) via a modified token serial number within a PIN change request, related to a "direct object reference vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-22  
Modified Date
2016-11-28  
Seq
2016-0915  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95799 17264 CVE-2016-0915 20160806 ESA-2016-070: RSA Authentication Manager Prime SelfService Insecure Direct Object Reference Vulnerability  View
95800 17264 CVE-2016-0915 92394  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3648 JVNDB-2016-004421 EMC RSA Authentication Manager Prime Self-Service のセルフサービスポータルにおけるサービス運用妨害 (DoS) の脆弱性 EMC RSA Authentication Manager (AM) Prime Self-Service のセルフサービスポータルには、"安全でないオブジェクトの直接参照の脆弱性" に関する処理に不備があるため、サービス運用妨害 (任意ユーザの PIN 変更) 状態にされる脆弱性が存在します。 CVE-2016-0915 87119 CVE-2016-0915 17264 5.5 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004421.html 2016-08-08 2016-08-23 View