PT-2024-2025 · Progress · Openedge Authentication Gateway+1

Published 2024-02-27 · Updated 2025-09-09 · CVE-2024-1403

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenEdge Authentication Gateway and AdminServer versions prior to 11.7.19, 12.2.14, 12.8.1

Description The issue is an authentication bypass vulnerability based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication. This vulnerability allows an attacker to gain unauthorized access to various OpenEdge components, including sensitive databases. It is estimated that over 7,500 services are potentially affected. A proof-of-concept exploit has been released, and users are advised to update to supported versions as soon as possible.

Recommendations To resolve the issue for each affected version, update OpenEdge Authentication Gateway and AdminServer to versions 11.7.19, 12.2.14, or 12.8.1. As a temporary workaround, consider restricting access to the vulnerable components until a patch is applied. Additionally, enable automatic software updates, use strong passwords and two-factor authentication, and be cautious when working online. Regularly back up data and do not ignore updates.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-305

Related Identifiers

BDU:2024-01890

CVE-2024-1403

Affected Products

Server Admin

Openedge Authentication Gateway

References · 53

• 🔥 https://github.com/horizon3ai/CVE-2024-1403 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-1403 · Security Note
• https://osv.dev/vulnerability/CVE-2024-1403 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01890 · Security Note
• https://community.progress.com/s/article/Important-Critical-Alert-for-OpenEdge-Authentication-Gateway-and-AdminServer · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1762533467428974672 · Twitter Post
• https://twitter.com/CoreSecurity/status/1867310823317594414 · Twitter Post
• https://t.me/pentestingnews/44132 · Telegram Post
• https://twitter.com/ksg93rd/status/1768309466515005479 · Twitter Post
• https://progress.com/openedge · Note
• https://twitter.com/CVEnew/status/1762506035825385697 · Twitter Post
• https://t.me/defcon_news/122186 · Telegram Post
• https://twitter.com/fletch_ai/status/1767341495298744589 · Twitter Post
• https://twitter.com/solminingpunk/status/1767245761744433384 · Twitter Post
• https://twitter.com/Hadess_security/status/1767462922802885004 · Twitter Post