CVE-2024-1403: progress openedge

csirt@kutim:~/threat-intel/cve/CVE-2024-1403

CVSS 9.8 · Critical EPSS 3,3%

Kerentanan Authentication Bypass by Primary Weakness pada progress openedge. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.

Rincian

Terbit di NVD: 27 Februari 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-305: Authentication Bypass by Primary Weakness
EPSS (30 hari): 3,3% peluang dieksploitasi; lebih tinggi dari 88,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
progress	openedge	Semua versi sebelum 11.7.19
progress	openedge	Versi 11.8 hingga sebelum 12.2.14
progress	openedge	Versi 12.3 hingga sebelum 12.8.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://community.progress.com/s/article/Important-Critical-Alert-for-OpenEdge-Authentication-Gateway-and-Admi... advisory vendor
https://www.progress.com/openedge product

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.