UpHeron
All vulnerabilities

Servers and applications

CVE-2002-0507

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.

Severity
Low 2.1
Published
12 Aug 2002
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.2% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
Improper authentication (CWE-287)
Attack
Needs local access · No login needed
Attacker can
Change some data
CVSS vector
AV:L/AC:L/Au:N/C:N/I:P/A:N
Sources
NVD

Affected software

SoftwareAffected versions
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server
  • Version 2000-sp2
  • Version 2000-sp1
  • Version 2000
  • Version 5.5-sp4
All 8 release lines
  • Version 5.5
  • Version 5.5-sp1
  • Version 5.5-sp2
  • Version 5.5-sp3
  • Version 5.5-sp4
  • Version 2000
  • Version 2000-sp1
  • Version 2000-sp2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2002-0507
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2002-0507