EIP-2026-118868
PRE-CVEMicrosoft URLScan 2.5/RSA Security SecurID 5.0 - Configuration Enumeration
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118868. PoCs published by Andy Davis.
AI-analyzed exploit summary This is a technical writeup describing a vulnerability in Microsoft URLScan and RSA Security SecurID when used together. The issue arises from the order of ISAPI filters, allowing an attacker to enumerate URLScan's extension filtering list via repeated requests with varying extensions.
Description
Microsoft URLScan 2.5/RSA Security SecurID 5.0 - Configuration Enumeration
Exploits (1)
This is a technical writeup describing a vulnerability in Microsoft URLScan and RSA Security SecurID when used together. The issue arises from the order of ISAPI filters, allowing an attacker to enumerate URLScan's extension filtering list via repeated requests with varying extensions.