PT-2024-10724
CVE-2019-17082
·
Published
2024-11-26
·
Updated
2024-12-17
Description by
CVSS 4.0
9.0
CriticalMetricsAV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:N/R:I/V:C/RE:M/U:Red
Name of the Vulnerable Software and Affected Versions
OpenText AccuRev version 2017.1
Description
The issue allows authentication bypass, enabling anyone with knowledge of a valid AccuRev username to gain access to AccuRev source control without knowing the user's password. This can occur when the software is installed on a Linux or Solaris system.
Recommendations
For version 2017.1, update to a newer version to mitigate the risk, as the current version allows authentication bypass.
Found an issue in the description? Have something to add? Feel free to write us 👾