CVE-2014-4619
First published: Thu Aug 28 2014(Updated: )
EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC RSA Identity Management and Governance | =6.5.0 | |
| EMC RSA Identity Management and Governance | =6.5.1 | |
| EMC RSA Identity Management and Governance | =6.5.2 | |
| EMC RSA Identity Management and Governance | =6.8.0 | |
| EMC RSA Identity Management and Governance | =6.8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html
- http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html
- http://secunia.com/advisories/60281
- http://www.securityfocus.com/bid/69411
- http://www.securitytracker.com/id/1030759
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95483
Frequently Asked Questions
What is the severity of CVE-2014-4619?
CVE-2014-4619 has been classified as a high severity vulnerability due to the potential for remote attackers to bypass authentication.
How do I fix CVE-2014-4619?
To fix CVE-2014-4619, upgrade EMC RSA Identity Management and Governance software to the latest patched version including 6.5.1 P11, 6.5.2 P02HF01, or 6.8.1 P07.
Which versions are affected by CVE-2014-4619?
CVE-2014-4619 affects EMC RSA Identity Management and Governance versions 6.5.0, 6.5.1, 6.5.2, and 6.8.0.
What type of attack can exploit CVE-2014-4619?
CVE-2014-4619 can be exploited by remote attackers to bypass authentication using an arbitrary valid username.
Is CVE-2014-4619 associated with any specific software?
Yes, CVE-2014-4619 is associated with EMC RSA Identity Management and Governance software when used with Novell Identity Manager.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- agent/author
- agent/first-publish-date
- agent/source
- vendor/emc
- canonical/emc rsa identity management and governance
- version/emc rsa identity management and governance/6.5.0
- version/emc rsa identity management and governance/6.5.1
- version/emc rsa identity management and governance/6.5.2
- version/emc rsa identity management and governance/6.8.0
- version/emc rsa identity management and governance/6.8.1