CVE-2014-5376
adaptivecomputing moab: no CVSS score yet. EPSS 1.7% chance of exploitation in the next 30 days.
Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0, when a pre-generated key is used, does not validate that the requesting user matches the actor in the message, which allows remote authenticated users to impersonate arbitrary users via the actor field in a message.
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adaptivecomputing:moab
References
- http://packetstormsecurity.com/files/128485/Moab-Insecure-Message-Signing-Authentication-Bypass.html
- http://www.adaptivecomputing.com/security-advisory/
- http://www.securityfocus.com/archive/1/533577/100/0/threaded
- http://www.securityfocus.com/bid/70171
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96700