Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m24w-wg7m-x27h

Опубликовано: 27 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 10

Описание

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.  

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.  

EPSS

Процентиль: 95%
0.16569
Средний

10 Critical

CVSS3

Дефекты

CWE-305

Связанные уязвимости

CVSS3: 10
nvd
почти 2 года назад

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.  

CVSS3: 10
fstec
почти 2 года назад

Уязвимость программного обеспечения для управления идентификацией OpenEdge Authentication Gateway, связанная с обходом аутентификации в силу исходной ошибки, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 95%
0.16569
Средний

10 Critical

CVSS3

Дефекты

CWE-305