[{"vendor":"progress","product":"openedge","defaultStatus":"affected","cpes":["cpe:2.3:a:progress:openedge:*:*:*:*:*:*:*:*"],"versions":[{"version":"11.7.0","lessThan":"11.7.19","versionType":"semver","status":"affected"},{"version":"12.2.0","lessThan":"12.2.14","versionType":"semver","status":"affected"},{"version":"12.8.0","lessThan":"12.8.1","versionType":"semver","status":"affected"}]}]

{"timestamp":"2024-03-16T04:00:49.775339Z","id":"CVE-2024-1403","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Progress","product":"OpenEdge","defaultStatus":"affected","modules":["OpenEdge Authentication Gateway","AdminServer"],"platforms":["Windows","Linux","x86","64 bit","32 bit"],"versions":[{"version":"11.7.0","lessThan":"11.7.19","versionType":"semver","status":"affected"},{"version":"12.2.0","lessThan":"12.2.14","versionType":"semver","status":"affected"},{"version":"12.8.0","lessThan":"12.8.1","versionType":"semver","status":"affected"}]}]

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST NVD-CWE-noinfo

OR
     *cpe:2.3:a:progress:openedge:*:*:*:*:lts:*:*:* versions up to (excluding) 11.7.19
     *cpe:2.3:a:progress:openedge:*:*:*:*:lts:*:*:* versions from (including) 11.8 up to (excluding) 12.2.14
     *cpe:2.3:a:progress:openedge:*:*:*:*:lts:*:*:* versions from (including) 12.3 up to (excluding) 12.8.1

https://community.progress.com/s/article/Important-Critical-Alert-for-OpenEdge-Authentication-Gateway-and-AdminServer No Types Assigned

https://community.progress.com/s/article/Important-Critical-Alert-for-OpenEdge-Authentication-Gateway-and-AdminServer Vendor Advisory

https://community.progress.com/s/article/Important-Critical-Alert-for-OpenEdge-Authentication-Gateway-and-AdminServer No Types Assigned

https://community.progress.com/s/article/Important-Critical-Alert-for-OpenEdge-Authentication-Gateway-and-AdminServer Vendor Advisory

https://www.progress.com/openedge No Types Assigned

https://www.progress.com/openedge Product

https://www.progress.com/openedge No Types Assigned

https://www.progress.com/openedge Product

https://community.progress.com/s/article/Important-Critical-Alert-for-OpenEdge-Authentication-Gateway-and-AdminServer

https://www.progress.com/openedge

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The
vulnerability is a bypass to authentication based on a failure to properly
handle username and password.  Certain unexpected
content passed into the credentials can lead to unauthorized access without proper
authentication.    

Progress Software Corporation AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Progress Software Corporation CWE-305

Progress Software Corporation https://community.progress.com/s/article/Important-Critical-Alert-for-OpenEdge-Authentication-Gateway-and-AdminServer [No types assigned]

Progress Software Corporation https://www.progress.com/openedge [No types assigned]