CVE-2016-0915: Emc Authentication Manager Prime

High severity, CVSS 8.1. EPSS: 2.2% chance of exploitation in the next 30 days.

The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service (PIN change for an arbitrary user) via a modified token serial number within a PIN change request, related to a "direct object reference vulnerability."

Affected products

• Emc Authentication Manager Prime: version 3.0 only; version 3.1 only

Published 2016-08-22. Last modified 2026-06-17.