Authentication Bypass in OpenEdge Authentication Gateway and AdminServer
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 10epss 3.3%
from disclosure to weapon8 days
Published on NVDFeb 27
1st PoC+8d
exploitation probability
3.3%top 13% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The
vulnerability is a bypass to authentication based on a failure to properly
handle username and password. Certain unexpected
content passed into the credentials can lead to unauthorized access without proper
authentication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Progress · OpenEdgepublic PoCs found — 1
githubgithub.com/horizon3ai/CVE-2024-1403★ 17⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.