CVE-2014-4619 EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers....
HighCVSS 9.3
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc rsa identity management and governance | = 6.5.0 | No fix listed |
| emc rsa identity management and governance | = 6.5.1 | No fix listed |
| emc rsa identity management and governance | = 6.5.2 | No fix listed |
| emc rsa identity management and governance | = 6.8.0 | No fix listed |
| emc rsa identity management and governance | = 6.8.1 | No fix listed |
References
- 20140826 ESA-2014-081 RSA Identity Management and Governance Authentication Bypass Vulnerability mailing-list
- packetstormsecurity.com
- 60281 third-party-advisory
- 69411 vdb-entry
- 1030759 vdb-entry
- rsa-identity-cve20144619-sec-bypass(95483) vdb-entry