CVE-2014-4619: EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x be...

Security readout for executives and security teams

CVE-2014-4619 is an authentication bypass in EMC RSA Identity Management and Governance when Novell Identity Manager is used. A remote attacker could bypass login using an arbitrary valid username, potentially reaching identity governance functions without knowing that user’s password. Exposure is likely limited to organizations still running legacy EMC RSA IMG 6.5.x or 6.8.x with Novell Identity Manager integration. Internet-facing administrative access would increase urgency, but the provided sources do not confirm typical deployment exposure. Treat this as high priority for any remaining legacy RSA IMG deployment. Identity governance platforms can affect user access and privilege decisions, so an authentication bypass has business impact even without confirmed exploitation in the supplied evidence. Mitigation focus: Upgrade affected RSA IMG branches to the fixed patch levels cited by the advisory.; Confirm current vendor guidance for any still-supported RSA IMG or successor deployments.; Restrict network access to RSA IMG administrative and identity-management interfaces..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.