CVE-2013-7292 - CVE House
Back to Database
Status published Low CVE-2013-7292

VASCO IDENTIKEY Authentication Server (IAS) 3.4.x allows remote authenticated users...

Vulnerability Description

VASCO IDENTIKEY Authentication Server (IAS) 3.4.x allows remote authenticated users to bypass Active Directory (AD) authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-7292

Credits & Attribution

No credits recorded in the NVD database.

References

More from vasco

View All →
CVE-2015-7349
Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in...
Medium 6.1

Affected Vendor

Affected Software

identikey authentication server
Vulnerable Versions:
3.4

Timeline

Official Publish: January 13th, 2014
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.