Yubico Yubikey One Time Password Validation Server
2 CVEs affecting Yubico Yubikey One Time Password Validation Server. Latest disclosed: 2020-03-05. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10185 | High | 8.6 | 2020-03-05 | The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outsid… |
CVE-2020-10184 | High | 7.5 | 2020-03-05 | The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of servi… |