Approved changes feed: RSS · Atom
cpe:2.3:a:black_duck:coverity:2025.3.0a:*:*:*:*:*:*:*
part: a version: 2025.3.0a update: *
| Vendor | Black Duck (955ec90c-a671-5474-b283-5788a424fe95) |
|---|---|
| Product | Coverity (0aad3cf3-0a60-5e18-8d5b-819cf95ddac4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1496 |
not_vulnerable | 2026-06-08 07:49:08.754632 |
Coverity CLI Authentication Bypass
Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a specially crafted HTTP request to bypass authentication. Successful exploitation allows the malicious actor to assume all roles and privileges granted to the valid user’s Coverity Connect account.
Published: 2026-03-27T14:14:01.871Z
Updated: 2026-03-27T14:36:04.188Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.