low3.5
CVE-2014-0348
The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Archit…
Impact
The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding username on a Windows client machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ontariosystems | Artiva Architect | Version 3.2 |
| Ontariosystems | Artiva Healthcare | Version 5.2 |
| Ontariosystems | Artiva Rm | Version 3.1 |
| Ontariosystems | Artiva Workstation | Version 1.3.0 |