CVEvulnerability

CVE-2014-0348

3.5 LOW Published 2014-04-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
Weaknesses
CWE-287

Description

The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding username on a Windows client machine.

Affected configurations

• ontariosystems artiva architect 3.2 • ontariosystems artiva healthcare 5.2 • ontariosystems artiva rm 3.1 • ontariosystems artiva workstation 1.3.0

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References