CVE-2014-5376

Moab Authentication Bypass (CVE-2014-5376): Moab before 7.2.9 and 8 before 8.0.0 can sign messages with a pre-generated key, bypassing validation that the signing user matches the actor in the message. This allows remote authenticated users to impersonate arbitrary users via the actor field, enab...

CVE-2014-5375

CVE-2014-5375 affects Adaptive Computing Moab workload manager. It occurs when the Moab server does not properly validate that the message owner matches the submitting user, permitting remote authenticated users to impersonate arbitrary users via the and fields. Affected: Moab prior to 7.2.9 an...