GCVE-110-CERTCC-2013-612076

Advisory PublishedCVSS 3.5/10

Vulnetix · Advisory published December 13, 2013

VASCO IDENTIKEY Authentication Server version 3.4.x contains an authentication bypass vulnerability which could allow an attacker to login to a system without needing the user's Active Directory password credentials.

Download JSON Open in Console

Risk Scores

CVSS 2.0

3.5/10

Low · AV:N/AC:M/Au:S/C:P/I:N/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score2.7remediation_levelOFreport_confidenceCenvironmental_score4.0997992552263target_distributionMenvironmental_vectorCDP:LM/TD:M/CR:H/IR:ND/AR:ND

References

VASCO IDENTIKEY Authentication Server contains an authentication bypass vulnerability

url

VASCO IDENTIKEY Authentication Server contains an authentication bypass vulnerability

url

VASCO IDENTIKEY Authentication Server contains an authentication bypass vulnerability

url

VASCO IDENTIKEY Authentication Server contains an authentication bypass vulnerability

advisory

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON