CVE-2014-4619

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-28 · updated 2026-06-17
Weakness: CWE-287

Description

EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.

Affected products

EMC Rsa Identity Management And Governance: 6.5.0, 6.5.1, 6.5.2, 6.8.0, 6.8.1

References

http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html
http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html
http://secunia.com/advisories/60281
http://www.securityfocus.com/bid/69411
http://www.securitytracker.com/id/1030759
https://exchange.xforce.ibmcloud.com/vulnerabilities/95483
http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html
http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html
http://secunia.com/advisories/60281
http://www.securityfocus.com/bid/69411
http://www.securitytracker.com/id/1030759
https://exchange.xforce.ibmcloud.com/vulnerabilities/95483

Get alerted when CVE-2014-4619 or the next vulnerability affects your stack