Lucene search

K
nvd[email protected]NVD:CVE-2014-4619
HistoryAug 28, 2014 - 1:55 a.m.

CVE-2014-4619

2014-08-2801:55:03
CWE-287
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.

Affected configurations

NVD
Node
emcrsa_identity_management_and_governanceMatch6.5.0
OR
emcrsa_identity_management_and_governanceMatch6.5.1
OR
emcrsa_identity_management_and_governanceMatch6.5.2
OR
emcrsa_identity_management_and_governanceMatch6.8.0
OR
emcrsa_identity_management_and_governanceMatch6.8.1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

Related for NVD:CVE-2014-4619