CVE-2016-0915 | BDVDB-2026-77761 Detail

Description#

The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service (PIN change for an arbitrary user) via a modified token serial number within a PIN change request, related to a "direct object reference vulnerability."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/92394
http://seclists.org/bugtraq/2016/Aug/71
http://www.securitytracker.com/id/1036557

Exploit#

No public exploit known

History#

Version 12016-08-22Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.