PT-2014-6394 · Adaptive Computing · Moab

John Fitzpatrick · Publicado 2014-10-08 · Atualizado 2018-10-09 · CVE-2014-5300

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adaptive Computing Moab versions prior to 7.2.9 Adaptive Computing Moab version 8 before 8.0.0

Description The issue allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute commands via a message without a signature.

Recommendations For versions prior to 7.2.9, update to version 7.2.9 or later. For version 8 before 8.0.0, update to version 8.0.0 or later.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-5300

Produtos afetados

Moab

Referências · 8

• 🔥 https://exploit-db.com/exploits/34865 · Exploit
• 🔥 http://packetstormsecurity.com/files/128483/Moab-Dynamic-Configuration-Authentication-Bypass.html · Exploit
• 🔥 http://exploit-db.com/exploits/34865 · Exploit
• http://securityfocus.com/archive/1/533574/100/0/threaded · Nota
• http://securityfocus.com/bid/70173 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5300 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96699 · Nota
• http://adaptivecomputing.com/security-advisory · Aviso do Fabricante