CVE-2014-5215 in Access Manager
Zusammenfassung (Englisch)
NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev_services.jsp or (2) roma/jsp/debug/debug.jsp.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservieren
13.08.2014
Veröffentlichung
23.12.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 68465 | NetIQ Access Manager Passwort Information Disclosure | 200 | Proof-of-Concept | Offizieller Fix | CVE-2014-5215 |