CVE-2019-17082: Missing Authentication vulnerability in OpenText AccuRev for LDAP Integration, version 2017.1.

Published Nov 26, 2024

Updated

Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system

the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control without knowing the user’s password.

This issue affects AccuRev: 2017.1.

Affected Software

1 affected component

OpenText AccuRev

Remediation

Information

KM03544106 - AccuRev for LDAP Integration, version 2017.1, access may be granted without a password - CVE-2019-17082 https://support.microfocus.com/kb/kmdoc.php

Event History

Nov 26, 2024

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-17082?

CVE-2019-17082 has been rated as a critical vulnerability due to its potential for authentication bypass.

How do I fix CVE-2019-17082?

To fix CVE-2019-17082, it is recommended to apply the latest security patches provided by OpenText for AccuRev.

What systems are affected by CVE-2019-17082?

CVE-2019-17082 affects OpenText AccuRev installations on Linux and Solaris systems.

Can CVE-2019-17082 lead to data breaches?

Yes, CVE-2019-17082 can potentially lead to unauthorized access to AccuRev, which may result in data breaches.

Is CVE-2019-17082 easy to exploit?

CVE-2019-17082 can be easily exploited by anyone with knowledge of a valid AccuRev username.