« Volver al listado

CVE-2014-4619

Estado: ModificadaAlta (9.3)—

EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — RSA Identity Management AND Governance

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-4619",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-08-28T01:55:03.467",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://secunia.com/advisories/60281",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/69411",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030759",
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95483",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/60281",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/69411",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030759",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95483",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username."
    },
    {
      "lang": "es",
      "value": "EMC RSA Identity Management and Governance (IMG) 6.5.x en versiones anteriores a 6.5.1 P11, 6.5.2 en versiones anteriores a P02HF01 y 6.8.x en versiones anteriores a 6.8.1 P07, cuando se utiliza Novell Identity Manager (también conocido como NovellIM), permite a atacantes remotos eludir la autenticación a través de un nombre de usuario válido arbitrario."
    }
  ],
  "lastModified": "2026-06-17T00:10:21.243",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "078A9A1C-1980-4BC2-B834-0FE605340E6B"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77D10870-F3D6-4F87-83E8-F75BA4714D14"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6C470F9-37F4-4D70-B23A-8B07D0277AFE"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5092E3C-7F0A-45D5-8F54-0E459DF6B65F"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_identity_management_and_governance:6.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18C2EBA4-DDE0-45C7-9A1D-7AFDD3D808D8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}