VULNERABILITY INTELLIGENCE
CVE-2014-4631
CVSS score5 MEDIUM
EPSS probability1.67%
CISA KEVNot currently listed
Published2014-12-08
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent device binding even when authentication fails, which allows remote attackers to bypass authentication.
Weakness classification
- CWE-287: Improper Authentication