CVE-2014-0348

2014-04-1510:55:11

CWE-287

[email protected]

web.nvd.nist.gov

artiva

sso

cve-2014-0348

security

vulnerability

remote login

domain accounts

nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

JSON

The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding username on a Windows client machine.

Affected configurations

NVD

Node

ontariosystemsartiva_architectMatch3.2mr5

ontariosystemsartiva_healthcareMatch5.2mr5

ontariosystemsartiva_rmMatch3.1mr7

ontariosystemsartiva_workstationMatch1.3.0

CPENameOperatorVersion
ontariosystems:artiva_architectontariosystems artiva architecteq3.2
ontariosystems:artiva_healthcareontariosystems artiva healthcareeq5.2
ontariosystems:artiva_rmontariosystems artiva rmeq3.1
ontariosystems:artiva_workstationontariosystems artiva workstationeq1.3.0

CPE	Name	Operator	Version
ontariosystems:artiva_architect	ontariosystems artiva architect	eq	3.2
ontariosystems:artiva_healthcare	ontariosystems artiva healthcare	eq	5.2
ontariosystems:artiva_rm	ontariosystems artiva rm	eq	3.1
ontariosystems:artiva_workstation	ontariosystems artiva workstation	eq	1.3.0