Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5mv2-m792-g4pg

Опубликовано: 26 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9

Описание

Missing Authentication for Critical Function vulnerability in OpenText™ AccuRev for LDAP Integration allows Authentication Bypass. The vulnerability could allow 

a valid AccuRev username to gain access to AccuRev source control without knowing the user’s password.

This issue affects AccuRev for LDAP Integration: 2017.1.

Missing Authentication for Critical Function vulnerability in OpenText™ AccuRev for LDAP Integration allows Authentication Bypass. The vulnerability could allow 

a valid AccuRev username to gain access to AccuRev source control without knowing the user’s password.

This issue affects AccuRev for LDAP Integration: 2017.1.

EPSS

Процентиль: 10%
0.00035
Низкий

9 Critical

CVSS4

Дефекты

CWE-306
CWE-522

Связанные уязвимости

nvd
около 1 года назад

Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control without knowing the user’s password. This issue affects AccuRev: 2017.1.

EPSS

Процентиль: 10%
0.00035
Низкий

9 Critical

CVSS4

Дефекты

CWE-306
CWE-522