Incorrect Access Control in YubiKey 5 Series, Security Key Series, YubiKey Bio Series, and YubiKey 5 FIPS

CVE-2024-35311

What is CVE-2024-35311?

An access control vulnerability has been identified in multiple Yubico products, including the YubiKey 5 Series, Security Key Series, YubiKey Bio Series, and YubiKey 5 FIPS. Versions prior to certain updates are affected, potentially allowing unauthorized access to secure functions. This issue underscores the importance of keeping biometric and authentication devices updated to safeguard sensitive information effectively. For further details, visit Yubico's official security advisory.

References