Lucene search

PRIOn knowledge basePRION:CVE-2014-4619

HistoryAug 28, 2014 - 1:55 a.m.

Authentication flaw

2014-08-2801:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

87.8%

JSON

EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.

CPENameOperatorVersion
rsa_identity_management_and_governanceeq6.5.0
rsa_identity_management_and_governanceeq6.8.0
rsa_identity_management_and_governanceeq6.5.2
rsa_identity_management_and_governanceeq6.5.1
rsa_identity_management_and_governanceeq6.8.1

Name	Operator	Version
rsa_identity_management_and_governance	eq	6.5.0
rsa_identity_management_and_governance	eq	6.8.0
rsa_identity_management_and_governance	eq	6.5.2
rsa_identity_management_and_governance	eq	6.5.1
rsa_identity_management_and_governance	eq	6.8.1

References

archives.neohapsis.com/archives/bugtraq/2014-08/0133.html

packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html

secunia.com/advisories/60281

www.securityfocus.com/bid/69411

www.securitytracker.com/id/1030759

exchange.xforce.ibmcloud.com/vulnerabilities/95483

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

87.8%

JSON

Related for PRION:CVE-2014-4619