CVE-2014-5300 Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute commands via a message without a signature.
MediumCVSS 5.0
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute commands via a message without a signature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adaptivecomputing moab | <= 7.2.8 | No fix listed |
| adaptivecomputing moab | = 8.0 | No fix listed |
References
- packetstormsecurity.com exploit
- www.adaptivecomputing.com vendor-advisory
- 34865 exploit
- 20140929 Moab Authentication Bypass [CVE-2014-5300] mailing-list
- 70173 vdb-entry
- moab-cve20145300-sec-bypass(96699) vdb-entry