High severity8.1NVD Advisory· Published Aug 22, 2016· Updated Jun 17, 2026

CVE-2016-0915

Description

The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service (PIN change for an arbitrary user) via a modified token serial number within a PIN change request, related to a "direct object reference vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

EMC Corporation/Rsa Authentication Manager2 versions
cpe:2.3:a:emc:authentication_manager_prime:3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:emc:authentication_manager_prime:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:emc:authentication_manager_prime:3.1:*:*:*:*:*:*:*
EMC Corporation/RSA Authentication Manager (AM) Prime Self-Servicellm-fuzzy
Range: >= 3.0, <= 3.1 before 3.1 1915.42871

Patches

Vulnerability mechanics

References

seclists.org/bugtraq/2016/Aug/71nvdMailing ListThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/92394nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1036557nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000