CVE-2014-8487 Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMe...
MediumCVSS 4.0
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kony enterprise mobile management | <= 1.2 | No fix listed |
References
- 20150222 CVE-2014-8487: Kony EMM insecurity Direct Object Reference mailing-list
- 72714 exploit vdb-entry