Vulnerability Details CVE-2014-0348
The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding username on a Windows client machine.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.7%
CVSS Severity
CVSS v2 Score 3.5
Products affected by CVE-2014-0348
-
cpe:2.3:a:ontariosystems:artiva_architect:3.2
-
cpe:2.3:a:ontariosystems:artiva_healthcare:5.2
-
cpe:2.3:a:ontariosystems:artiva_rm:3.1
-
cpe:2.3:a:ontariosystems:artiva_workstation:1.3.0