NA

CVE-2024-1403

Published: 27/02/2024 Updated: 28/02/2024

Vulnerability Summary

In OpenEdge Authentication Gateway and AdminServer before 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.  

Vulnerability Trend

Github Repositories

Progress OpenEdge Authentication Bypass

CVE-2024-1403 Progress OpenEdge Authentication Bypass An exploit proof of concept for Progress OpenEdge CVE-2024-1403 Blog Post More details here: wwwhorizon3ai/attack-research/cve-2024-1403-progress-openedge-authentication-bypass-deep-dive Usage You must provide your own versions of the following jars: progressjar oeauth-128-jar osmetricsjar juniperjar Compi