medium5.0Public exploit code
CVE-2014-5300
Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute command…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Moab < 7.2.9 - Authentication Bypass2014-10-02 · webapps · multiple
Impact
Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute commands via a message without a signature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adaptivecomputing | Moab | through 7.2.8 Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/128483/Moab-Dynamic-Configuration-Authentication-Bypass.html
- http://www.adaptivecomputing.com/security-advisory/
- http://www.exploit-db.com/exploits/34865
- http://www.securityfocus.com/archive/1/533574/100/0/threaded
- http://www.securityfocus.com/bid/70173
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96699
- http://packetstormsecurity.com/files/128483/Moab-Dynamic-Configuration-Authentication-Bypass.html
- http://www.adaptivecomputing.com/security-advisory/
- http://www.exploit-db.com/exploits/34865
- http://www.securityfocus.com/archive/1/533574/100/0/threaded
- http://www.securityfocus.com/bid/70173
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96699