VULNERABILITY INTELLIGENCE
CVE-2014-4619
CVSS score9.3 HIGH
EPSS probability4.45%
CISA KEVNot currently listed
Published2014-08-28
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- security_alert@emc.com
- security_alert@emc.com
- security_alert@emc.com
- security_alert@emc.com
- security_alert@emc.com
- security_alert@emc.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108