CVE-2014-5377

ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials…

mitre·CWE-200·Published 2014-09-04

CVSS

—

EPSS

0.57

KEV

Exploits

cve.orgen

158 chars

ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request.

NVDen

158 chars

ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request.

NVDes

200 chars

ReadUsersFromMasterServlet en ManageEngine DeviceExpert anterior a 5.9 build 5981 permite a atacantes remotos obtener las credenciales de las cuentas de los usuarios a través de una solicitud directa.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N