CVE-2014-5377

Currently unrated 🤨

Key Information

Vendor
Manageengine
Status
Device Expert
Vendor
CVE Published:
4 September 2014

Summary

ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request.

Refferences

http://www.exploit-db.com/exploits/34449
exploitx_refsource_EXPLOIT-DB
http://www.manageengine.com/products/device-expert/releas...
x_refsource_MISC
http://packetstormsecurity.com/files/128019/ManageEngine-...
x_refsource_MISC
https://raw.githubusercontent.com/pedrib/PoC/master/me_de...
x_refsource_MISC
http://seclists.org/fulldisclosure/2014/Aug/75
mailing-listx_refsource_FULLDISC
http://www.securityfocus.com/bid/69443
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/533250/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2014/Aug/84
mailing-listx_refsource_FULLDISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/95562
vdb-entryx_refsource_XF
http://seclists.org/fulldisclosure/2014/Aug/76
mailing-listx_refsource_FULLDISC

EPSS Score

19% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.