CVE-2002-0507: Microsoft Exchange Server

Low severity, CVSS 2.1. EPSS: 2.2% chance of exploitation in the next 30 days.

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.

Affected products

• Microsoft Exchange Server: version 5.5 only; version 2000 only
• Rsa Securid: version 5.0 only

Published 2002-08-12. Last modified 2026-06-16.