CVE-2019-17082CWE-522

Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass

Critical · published November 26, 2024

CVSS v4.0
9.0
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system

the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control without knowing the user’s password.

This issue affects AccuRev: 2017.1.

The record
Technical detail
CVSS v4.0
9.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:N/R:I/V:C/RE:M/U:Red
EPSS
0.00469 · 39.6th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2024-11-26T19:31Z
EPSS history
Timeline
  • 26 NOV 19:31Z
    Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass
    cvelistv5