CVE-2014-4619
RSA Identity Management and Governance Authentication Bypass
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.
EMC RSA Identity Management and Governance (IMG) 6.5.x en versiones anteriores a 6.5.1 P11, 6.5.2 en versiones anteriores a P02HF01 y 6.8.x en versiones anteriores a 6.8.1 P07, cuando se utiliza Novell Identity Manager (también conocido como NovellIM), permite a atacantes remotos eludir la autenticación a través de un nombre de usuario válido arbitrario.
RSA IMG systems configured with NovellIM as the authentication source may be subject to a potential authentication bypass vulnerability due to the fact that no password is required to authenticate legitimate users. A malicious user with knowledge of a valid user name can leverage this vulnerability to perform operations with the privileges of the authenticated user and potentially cause audit-attribution problems.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2014-06-24 CVE Reserved
- 2014-08-26 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html | Mailing List | |
| http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html | X_refsource_misc |
|
| http://secunia.com/advisories/60281 | Third Party Advisory | |
| http://www.securityfocus.com/bid/69411 | Vdb Entry | |
| http://www.securitytracker.com/id/1030759 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/95483 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Emc Search vendor "Emc" | Rsa Identity Management And Governance Search vendor "Emc" for product "Rsa Identity Management And Governance" | 6.5.0 Search vendor "Emc" for product "Rsa Identity Management And Governance" and version "6.5.0" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Identity Management And Governance Search vendor "Emc" for product "Rsa Identity Management And Governance" | 6.5.1 Search vendor "Emc" for product "Rsa Identity Management And Governance" and version "6.5.1" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Identity Management And Governance Search vendor "Emc" for product "Rsa Identity Management And Governance" | 6.5.2 Search vendor "Emc" for product "Rsa Identity Management And Governance" and version "6.5.2" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Identity Management And Governance Search vendor "Emc" for product "Rsa Identity Management And Governance" | 6.8.0 Search vendor "Emc" for product "Rsa Identity Management And Governance" and version "6.8.0" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Identity Management And Governance Search vendor "Emc" for product "Rsa Identity Management And Governance" | 6.8.1 Search vendor "Emc" for product "Rsa Identity Management And Governance" and version "6.8.1" | - |
Affected
| ||||||