CVE-2024-1403: Authentication Bypass in OpenEdge Authentication Gateway and AdminServer
In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1403?
CVE-2024-1403 has been identified as an authentication bypass vulnerability, which can lead to unauthorized access.
How do I fix CVE-2024-1403?
To remediate CVE-2024-1403, update OpenEdge Authentication Gateway and AdminServer to versions 11.7.19, 12.2.14, or 12.8.1 or later.
Which versions of Progress OpenEdge are affected by CVE-2024-1403?
CVE-2024-1403 impacts all versions of Progress OpenEdge prior to 11.7.19, as well as versions between 11.8 and 12.2.14 and versions between 12.3 and 12.8.1.
What are the potential impacts of CVE-2024-1403?
Exploitation of CVE-2024-1403 can allow attackers to bypass authentication mechanisms, leading to unauthorized access to sensitive systems.
Is CVE-2024-1403 common across all OpenEdge products?
CVE-2024-1403 affects both OpenEdge Authentication Gateway and AdminServer on all supported platforms.