9.0
Critical
CVE-2019-17082 Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass
Description
Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control without knowing the user’s password. This issue affects AccuRev: 2017.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AccuRev | 2017.1 | No fix stated |
| accurev_for_ldap_integration | 2017.1 | No fix stated |