CVE-2006-7199: High severity emc rsa security sitekey vulnerability
EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle (MITM) attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is easier to monitor this attack than "attacks against static web pages."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-7199?
The severity of CVE-2006-7199 is subject to debate, as the vendor claims it is lower than reported due to specific conditions required for exploitation.
How do I fix CVE-2006-7199?
To mitigate CVE-2006-7199, consider implementing secure communication protocols and validating server certificates to prevent man-in-the-middle attacks.
What kind of attack does CVE-2006-7199 involve?
CVE-2006-7199 involves a man-in-the-middle (MITM) attack where an attacker can proxy authentication data while displaying the correct image.
What software is affected by CVE-2006-7199?
CVE-2006-7199 affects EMC RSA Security SiteKey.
Can CVE-2006-7199 be exploited remotely?
Yes, CVE-2006-7199 can be exploited remotely if the attacker is able to execute a man-in-the-middle or proxy attack.