CVE-2014-0348 in Artiva Architect
Summary
by MITRE
The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding username on a Windows client machine.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 05/10/2026
The vulnerability described in CVE-2014-0348 represents a critical authentication bypass flaw within the Artiva Agency Single Sign-On implementation across multiple versions of Artiva Workstation, Rm, Healthcare, and Architect software. This security weakness specifically manifests when the domain-name option is enabled, creating an exploitable condition that allows remote attackers to authenticate as arbitrary domain accounts without proper credentials. The flaw fundamentally undermines the security model of single sign-on implementations by enabling unauthorized access to domain resources through manipulation of the authentication process.
The technical exploitation of this vulnerability occurs through a manipulation of the SSO authentication flow where attackers can leverage legitimate usernames from the target domain to gain access to accounts without possessing valid passwords or authentication tokens. This type of flaw falls under the category of improper authentication handling and can be classified as CWE-287 - Improper Authentication, which directly relates to the failure of the system to properly verify user credentials. The vulnerability exists in the Windows client machine environment where the Artiva SSO implementation interacts with domain authentication mechanisms, creating a pathway for attackers to bypass normal authentication procedures and directly access domain resources.
The operational impact of this vulnerability is severe and far-reaching within enterprise environments that utilize Artiva software solutions. Attackers can potentially gain access to sensitive corporate data, escalate privileges, and move laterally within networks by leveraging this authentication bypass to access accounts across different systems and applications. The vulnerability affects multiple versions of Artiva products, indicating a widespread exposure across various deployment scenarios including workstation environments, remote management systems, healthcare applications, and architectural design tools. This creates a significant risk for organizations that rely on these platforms for business-critical operations, as the vulnerability could be exploited to gain unauthorized access to confidential information and potentially compromise entire network infrastructures.
The attack vector for this vulnerability aligns with techniques described in the MITRE ATT&CK framework under the T1078 - Valid Accounts tactic, where adversaries leverage legitimate credentials to gain access to systems and resources. The vulnerability essentially allows attackers to perform account manipulation and impersonation without requiring knowledge of actual passwords, making it particularly dangerous for environments where domain accounts are used for accessing multiple systems. Organizations should consider implementing network segmentation, monitoring for unusual authentication patterns, and ensuring that all Artiva products are updated to versions that address this specific authentication bypass vulnerability. The recommended mitigation strategy involves immediate patching to versions 1.3.9 and later for Artiva Workstation, along with updates to the affected versions of Artiva Rm, Healthcare, and Architect products to prevent exploitation of this authentication flaw.