CVE-2019-17082 | THREATINT

Description

Missing Authentication for Critical Function vulnerability in OpenText™ AccuRev for LDAP Integration allows Authentication Bypass. The vulnerability could allow a valid AccuRev username to gain access to AccuRev source control without knowing the user’s password. This issue affects AccuRev for LDAP Integration: 2017.1.

Reserved 2019-10-02 | Published 2024-11-26 | Updated 2024-11-26 | Assigner OpenText

CRITICAL: 9.0CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:N/R:I/V:C/RE:M/U:Red

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

Default status

unaffected

2017.1

affected

References

support.microfocus.com/kb/kmdoc.php?id=KM03544106

cve.org (CVE-2019-17082)

nvd.nist.gov (CVE-2019-17082)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.