PT-2014-6394 · Adaptive Computing · Moab

John Fitzpatrick · Published 2014-10-08 · Updated 2018-10-09 · CVE-2014-5300

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adaptive Computing Moab versions prior to 7.2.9 Adaptive Computing Moab version 8 before 8.0.0

Description The issue allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute commands via a message without a signature.

Recommendations For versions prior to 7.2.9, update to version 7.2.9 or later. For version 8 before 8.0.0, update to version 8.0.0 or later.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2014-5300

Affected Products

Moab

References · 8

• 🔥 https://exploit-db.com/exploits/34865 · Exploit
• 🔥 http://packetstormsecurity.com/files/128483/Moab-Dynamic-Configuration-Authentication-Bypass.html · Exploit
• 🔥 http://exploit-db.com/exploits/34865 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5300 · Security Note
• http://adaptivecomputing.com/security-advisory · Vendor Advisory
• http://securityfocus.com/archive/1/533574/100/0/threaded · Note
• http://securityfocus.com/bid/70173 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96699 · Note