CVE-2014-4619

EMC RSA IMG <6.5.1P11-6.8.1P07 - Auth Bypass

Title source: llm

Description

EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.

References (6)

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html

[Exploit, Third Party Advisory] http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/95483

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/69411

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1030759

[Third Party Advisory] http://secunia.com/advisories/60281

Scores

EPSS 0.0209

EPSS Percentile 83.8%

Classification

CWE

CWE-287

Status draft

Affected Products (5)

emc/rsa_identity_management_and_governance

emc/rsa_identity_management_and_governance

emc/rsa_identity_management_and_governance

emc/rsa_identity_management_and_governance

emc/rsa_identity_management_and_governance

Timeline

Published Aug 28, 2014

Tracked Since Feb 18, 2026