CVE-2017-8006: In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Servic...

Security readout for executives and security teams

RSA Authentication Manager Self-Service Console could allow a logged-in malicious user, acting as a target user, to brute force that user's PIN. A successful compromise could let the attacker reset the PIN and interfere with the victim's access to protected resources. Exposure is limited to organizations running RSA Authentication Manager 8.2 SP1 Patch 1 or earlier with Self-Service Console access enabled. Risk depends on whether attackers can obtain or use a target user's console session. Treat this as a targeted identity-access risk, not a broad internet worm scenario. Prioritize inventory and vendor remediation because RSA Authentication Manager protects access to other business systems. Mitigation focus: Identify any RSA Authentication Manager 8.2 SP1 Patch 1 or earlier deployments.; Review RSA vendor guidance for fixed versions or supported mitigations.; Restrict Self-Service Console access to trusted networks and users where feasible..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.