CVE-2024-1403 - CVE House
Back to Database
Status published Critical CVE-2024-1403

Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

Vulnerability Description

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.  

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-1403

Credits & Attribution

No credits recorded in the NVD database.

References

More from Progress

View All →
CVE-2025-2324
A MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folder
Medium 5.9
CVE-2025-1758
Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer...
Medium 4.3
CVE-2025-13147
External Service Interaction (DNS)
Medium 5.3
CVE-2025-11235
MOVEit Transfer REST API does not require current password in order to initiate the password change process
Low 3.7
CVE-2025-10932
AS2 module allows uncontrolled file uploads
High 8.2

Affected Vendor

Affected Software

OpenEdge
Vulnerable Versions:
11.7.0, 12.2.0, 12.8.0

Timeline

Official Publish: February 27th, 2024
Last Modified: August 12th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-305

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.