CVE-2019-17082

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-17082
Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control without knowing the user’s password. This issue affects AccuRev: 2017.1.
CVSS

No CVSS.

References
Link Resource
https://support.microfocus.com/kb/kmdoc.php?id=KM03544106
Configurations

No configuration.

History

15 Apr 2026, 00:35

Type Values Removed Values Added
Summary (es) La vulnerabilidad de falta de autenticación para funciones críticas en AccuRev for LDAP Integration de OpenText™ permite omitir la autenticación. La vulnerabilidad podría permitir que un nombre de usuario válido de AccuRev obtenga acceso al control de origen de AccuRev sin conocer la contraseña del usuario. Este problema afecta a AccuRev for LDAP Integration: 2017.1. (es) Vulnerabilidad de Credenciales Insuficientemente Protegidas en OpenText™ AccuRev permite la Omisión de Autenticación. Cuando se instala en un sistema Linux o Solaris, la vulnerabilidad podría permitir que cualquiera que conozca un nombre de usuario válido de AccuRev use el cliente de AccuRev para iniciar sesión y obtener acceso al control de código fuente de AccuRev sin conocer la contraseña del usuario. Este problema afecta a AccuRev: 2017.1.

17 Dec 2024, 16:15

Type Values Removed Values Added
Summary (en) Missing Authentication for Critical Function vulnerability in OpenText™ AccuRev for LDAP Integration allows Authentication Bypass. The vulnerability could allow  a valid AccuRev username to gain access to AccuRev source control without knowing the user’s password. This issue affects AccuRev for LDAP Integration: 2017.1. (en) Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control without knowing the user’s password. This issue affects AccuRev: 2017.1.
CWE CWE-306 CWE-522

26 Nov 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-26 20:15

Updated : 2026-04-15 00:35

NVD link : CVE-2019-17082

Mitre link : CVE-2019-17082

CVE.ORG link : CVE-2019-17082

JSON object : View

Products Affected

No product.

CWE
CWE-522

Insufficiently Protected Credentials