Vulnerability Details CVE-2006-7199
EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle (MITM) attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is easier to monitor this attack than "attacks against static web pages."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.0%
CVSS Severity
CVSS v2 Score 8.5
References
- http://www.cr-labs.com/publications/SiteKey-20060718.pdf
- http://www.cr-labs.com/publications/WhySiteKey-20060824.pdf
- http://www.networkworld.com/newsletters/sec/2007/0402sec2.html
- http://www.cr-labs.com/publications/SiteKey-20060718.pdf
- http://www.cr-labs.com/publications/WhySiteKey-20060824.pdf
- http://www.networkworld.com/newsletters/sec/2007/0402sec2.html
Products affected by CVE-2006-7199
-
cpe:2.3:a:emc:rsa_security_sitekey:*