CVE-2014-5215 in Access Manager
Summary
NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev_services.jsp or (2) roma/jsp/debug/debug.jsp.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
08/13/2014
Disclosure
12/23/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68465 | NetIQ Access Manager Password information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2014-5215 |