What’s Vulnerable › Vulnerabilities

CVE-2006-7201

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-04-30 · updated 2026-06-16

Description

EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the token via HTTP.

Affected products

• EMC Rsa Security Sitekey: all versions

References

• http://www.cr-labs.com/publications/SiteKey-20060718.pdf
• http://www.cr-labs.com/publications/WhySiteKey-20060824.pdf
• http://www.cr-labs.com/publications/SiteKey-20060718.pdf
• http://www.cr-labs.com/publications/WhySiteKey-20060824.pdf

Get alerted when CVE-2006-7201 or the next vulnerability affects your stack