Authentication Bypass in RSA SecurID Web Agent Affects EMC

CVE-2015-6851

What is CVE-2015-6851?

RSA SecurID Web Agent prior to version 8.0 is susceptible to an authentication bypass vulnerability that enables attackers with physical proximity to exploit unattended workstations. By utilizing tools like DOM Inspector, malicious users can circumvent privacy-screen protections, potentially gaining unauthorized access to sensitive information or systems. This vulnerability underscores the importance of securing workstations from physical access to prevent unauthorized actions.

References