VULNERABILITY INTELLIGENCE

CVE-2024-1403

CVSS score10 CRITICAL
EPSS probability3.27%
CISA KEVNot currently listed
Published2024-02-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.

Weakness classification

  • security@progress.com: CWE-305
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references