Description
An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.
References
- exchange-owa-securid-bypass(8681) vdb-entry
- 20020328 Authentication with RSA SecurID and Outlook web access mailing-list
- 4390 vdb-entry