CVE-2014-0348

Published: Apr 15, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding username on a Windows client machine.

Affected (4)

Products: Ontariosystems: Artiva Architect, Artiva Healthcare, Artiva Rm, Artiva Workstation

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ontariosystems Artiva Architect	Version 3.2 mr5
Ontariosystems Artiva Healthcare	Version 5.2 mr5
Ontariosystems Artiva Rm	Version 3.1 mr7
Ontariosystems Artiva Workstation	Version 1.3.0

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

http://www.kb.cert.org/vuls/id/215284

Source: cret@cert.org

US Government Resource

http://www.kb.cert.org/vuls/id/215284

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.