CVE-2014-5375 The server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate the message owner matches the submitting user, which allows remote authenticated users to impersonate a...
MediumCVSS 4.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate the message owner matches the submitting user, which allows remote authenticated users to impersonate arbitrary users via the UserId and Owner tags.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adaptivecomputing moab | <= 7.2.8 | No fix listed |
| adaptivecomputing moab | = 8.0 | No fix listed |
References
- packetstormsecurity.com exploit
- www.adaptivecomputing.com vendor-advisory
- 20140929 Moab User Impersonation [CVE-2014-5375] mailing-list
- 70174 vdb-entry
- moab-cve20145375-sec-bypass(96698) vdb-entry