CVE-2013-7292

CVE-2013-7292 describes an authentication bypass vulnerability in VASCO IDENTIKEY Authentication Server (IAS) 3.4.x. Remote authenticated users could bypass Active Directory authentication by providing only a DIGIPASS one-time password, circumventing the intended multi-factor authentication. With a CVSS score of 3.5, this vulnerability has a network attack vector and medium attack complexity, potentially leading to information disclosure (C:P). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.