Auth bypass in Ontariosystems Artiva Architect
CVE-2014-0348
The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding username on a Windows client machine.
Vulnerability class: Broken Authentication
EPSS: 0.009 (55.5th percentile) — read the EPSS interpretation.
Affected products
- Ontariosystems Artiva_architect — versions 3.2
- Ontariosystems Artiva_healthcare — versions 5.2
- Ontariosystems Artiva_rm — versions 3.1
- Ontariosystems Artiva_workstation — versions 1.3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)