Critical severity · published Nov 26, 2024
CVE-2019-17082
Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass
9.0
CVSS
0.5%
EPSS
No
On KEV
Description
Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system
the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control without knowing the user’s password.
This issue affects AccuRev: 2017.1.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
AccuRev · OpenText™
2017.1 · source: vendor
AF
Accurev For Ldap Integration · Opentext
2017.1 · source: CISA