Skip to content
NewA calmer, faster ZeroHour

CVE-2024-1403

CVSS 3.1
9.8 critical
EPSS
3%p88
Published
·
Modified
Analyze CVE-2024-1403 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.

Vendors
progress
Products
openedge
Weakness
CWE-305
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

3 stories