CVEvulnerability
CVE-2014-4619
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-08-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.
Affected configurations
• emc rsa identity management and governance 6.5.0
• emc rsa identity management and governance 6.5.1
• emc rsa identity management and governance 6.5.2
• emc rsa identity management and governance 6.8.0
• emc rsa identity management and governance 6.8.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html archives.neohapsis.com
- http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html packetstormsecurity.com
- http://secunia.com/advisories/60281 secunia.com
- http://www.securityfocus.com/bid/69411 www.securityfocus.com
- http://www.securitytracker.com/id/1030759 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95483 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html archives.neohapsis.com
- http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html packetstormsecurity.com
- http://secunia.com/advisories/60281 secunia.com
- http://www.securityfocus.com/bid/69411 www.securityfocus.com
- http://www.securitytracker.com/id/1030759 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95483 exchange.xforce.ibmcloud.com