CVE-2014-5375

Published: Oct 8, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate the message owner matches the submitting user, which allows remote authenticated users to impersonate arbitrary users via the UserId and Owner tags.

Affected (2)

Products: Adaptivecomputing: Moab

Adaptivecomputing

1 product

Moab

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Adaptivecomputing Moab	Up to 7.2.8
Adaptivecomputing Moab	Version 8.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://packetstormsecurity.com/files/128484/Moab-User-Impersonation.html

Source: cve@mitre.org

Exploit

http://www.adaptivecomputing.com/security-advisory/

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/533576/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/70174

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/96698

Source: cve@mitre.org

http://packetstormsecurity.com/files/128484/Moab-User-Impersonation.html