{"id": "SECURITYVULNS:DOC:31870", "bulletinFamily": "software", "title": "CVE-2014-8487: Kony EMM insecurity Direct Object Reference", "description": "\r\n\r\n------------------------------------------------------------------------\r\nProduct: Enterprise Mobile Management\r\nVendor: Kony\r\nVulnerable Version(s): Kony EMM 1.2 and probably older versions \r\nTested Version: Drupal Kony EMM 1.2 \r\nAdvisory Publication: 24 December 2014 \r\nVendor Notification: 8 December 2014 \r\nVulnerability Type: Insecure Direct Object References \r\nCVE Reference: CVE-2014-8487 \r\nRisk Level: Low Solution \r\nStatus: Solution not yet released \r\nDiscovered and Provided: Michael Hendrickx, Help AG\r\n------------------------------------------------------------------------\r\n\r\nAbout the vendor:\r\nKony EMM is a mobile management suite that allows organizations to manage employee's personal devices. It enables users to use their own device, or as often called BYOD or "bring your own device".\r\n\r\nAbout the vulnerability:\r\nDuring a pentest we discovered that a logged in user can access arbitrary information such as messages and phone information about every phone that's enrolled ot the solution. Often the user's colleagues:\r\n\r\n1.) Arbitrary Message retrieval\r\nBy using the following URL:\r\n\r\nhttps://<kony_emm>/emm/selfservice/managedevice/getMessageBody?messageId=<message ID>\r\n\r\nWhere <message ID> is an integer, an attacker can retrieve all messages sent to every mobile enrolled on the system.\r\n\r\n2.) Information retrieval\r\n\r\nBy going to the following URL\r\n\r\nhttps://<kony_emm>/emm/selfservice/devicemgmt/getDeviceInfoTab.htm?requestId=<request_id>&..."\r\n\r\nAn attacker can retrieve earlier "requests". A request "task" is generated when a person requests more information about his/her phone, such as IMEI numbers, phone, last locations, etc.\r\n\r\n-----------------------\r\n\r\nSolution:\r\n\r\nThe vendor was notified, contact the vendor for the patch details\r\n\r\nReferences:\r\n\r\n[1] help AG middle East http://www.helpag.com/ \r\n[2] Kony https://kony.com/\r\n\r\n", "published": "2015-03-23T00:00:00", "modified": "2015-03-23T00:00:00", "cvss": {"score": 4.0, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:NONE/A:NONE/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:31870", "reporter": "Securityvulns", "references": [], "cvelist": ["CVE-2014-8487"], "type": "securityvulns", "lastseen": "2018-08-31T11:10:58", "edition": 1, "viewCount": 67, "enchantments": {"score": {"value": 6.8, "vector": "NONE", "modified": "2018-08-31T11:10:58", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2014-8487"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:130486"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14346"]}], "modified": "2018-08-31T11:10:58", "rev": 2}, "vulnersScore": 6.8}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}}

{"cve": [{"id": "CVE-2014-8487", "bulletinFamily": "NVD", "title": "CVE-2014-8487", "description": "Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.", "published": "2015-02-24T15:59:00", "modified": "2018-10-09T19:54:00", "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8487", "reporter": "cve@mitre.org", "references": ["http://www.securityfocus.com/archive/1/534739/100/0/threaded", "http://www.securityfocus.com/bid/72714"], "cvelist": ["CVE-2014-8487"], "type": "cve", "lastseen": "2021-04-22T23:44:14", "history": [{"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "kony:enterprise_mobile_management", "name": "kony enterprise mobile management", "operator": "le", "version": "*"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:kony:enterprise_mobile_management:1.2"], "cpe23": ["cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*", "versionEndIncluding": "1.2", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2014-8487"], "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-200"], "description": "Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.", "edition": 4, "enchantments": {"dependencies": {"modified": "2020-11-29T23:22:00", "references": [{"idList": ["PACKETSTORM:130486"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:VULN:14346", "SECURITYVULNS:DOC:31870"], "type": "securityvulns"}], "rev": 2}, "score": {"modified": "2020-11-29T23:22:00", "rev": 2, "value": 5.8, "vector": "NONE"}}, "hash": "8c674c21f5f73423db2885d167929abbbb1fbde9b959d8d2f752d43595c7b3ac", "hashmap": [{"hash": "7170c8c24eb11be31fbe50a174e5e527", "key": "affectedSoftware"}, {"hash": "a2df757bfbc7033d459a0cc657b5fa02", "key": "modified"}, {"hash": "d9b2b1e42289eca78ade610440db686a", "key": "cpe23"}, {"hash": "4e24e7f6350643dd9630a8ce15f400fe", "key": "references"}, {"hash": "aad744ffc51e259aee9adab6cfc38a74", "key": "cpeConfiguration"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "6d016d155749cfa25d7ff1ad47413f42", "key": "cvelist"}, {"hash": "33a0c0308dd9385baf509771961990cf", "key": "published"}, {"hash": "cfb8d4f17b2559d0463b013cc41c97ac", "key": "description"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9b2a3159b4a4c3c620a78fe821539e8d", "key": "cvss2"}, {"hash": "4bf04e334e9e27742e0400017b733139", "key": "cpe"}, {"hash": "e258b79b31d39a327c9dafeb61b7a729", "key": "cvss"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "b647a850fd42b235dd11ee60cf626f2d", "key": "cwe"}, {"hash": "bfa064768a3eb27207c59b62310ddf39", "key": "title"}, {"hash": "851c9a9351f1083c9a029bee2204f4ec", "key": "href"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8487", "id": "CVE-2014-8487", "lastseen": "2020-11-29T23:22:00", "modified": "2018-10-09T19:54:00", "objectVersion": "1.3", "published": "2015-02-24T15:59:00", "references": ["http://www.securityfocus.com/archive/1/534739/100/0/threaded", "http://www.securityfocus.com/bid/72714"], "reporter": "cve@mitre.org", "title": "CVE-2014-8487", "type": "cve", "viewCount": 1}, "differentElements": ["affectedSoftware"], "edition": 4, "lastseen": "2020-11-29T23:22:00"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "kony:enterprise_mobile_management", "name": "kony enterprise mobile management", "operator": "le", "version": "1.2"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:kony:enterprise_mobile_management:1.2"], "cpe23": ["cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*", "versionEndIncluding": "1.2", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2014-8487"], "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-200"], "description": "Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.", "edition": 5, "enchantments": {"dependencies": {"modified": "2020-12-09T19:58:28", "references": [{"idList": ["PACKETSTORM:130486"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:VULN:14346", "SECURITYVULNS:DOC:31870"], "type": "securityvulns"}], "rev": 2}, "score": {"modified": "2020-12-09T19:58:28", "rev": 2, "value": 5.8, "vector": "NONE"}}, "extraReferences": [], "hash": "18230d65e28957d1dbf5ddddf70807441bdc86f629d863282ec24a4188d8d8ad", "hashmap": [{"hash": "a2df757bfbc7033d459a0cc657b5fa02", "key": "modified"}, {"hash": "d9b2b1e42289eca78ade610440db686a", "key": "cpe23"}, {"hash": "4e24e7f6350643dd9630a8ce15f400fe", "key": "references"}, {"hash": "aad744ffc51e259aee9adab6cfc38a74", "key": "cpeConfiguration"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "6d016d155749cfa25d7ff1ad47413f42", "key": "cvelist"}, {"hash": "33a0c0308dd9385baf509771961990cf", "key": "published"}, {"hash": "cfb8d4f17b2559d0463b013cc41c97ac", "key": "description"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "extraReferences"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9b2a3159b4a4c3c620a78fe821539e8d", "key": "cvss2"}, {"hash": "4bf04e334e9e27742e0400017b733139", "key": "cpe"}, {"hash": "e258b79b31d39a327c9dafeb61b7a729", "key": "cvss"}, {"hash": "9648ab108c5cc02d0af5a1c3612e80f4", "key": "affectedSoftware"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "b647a850fd42b235dd11ee60cf626f2d", "key": "cwe"}, {"hash": "bfa064768a3eb27207c59b62310ddf39", "key": "title"}, {"hash": "851c9a9351f1083c9a029bee2204f4ec", "key": "href"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8487", "id": "CVE-2014-8487", "lastseen": "2020-12-09T19:58:28", "modified": "2018-10-09T19:54:00", "objectVersion": "1.3", "published": "2015-02-24T15:59:00", "references": ["http://www.securityfocus.com/archive/1/534739/100/0/threaded", "http://www.securityfocus.com/bid/72714"], "reporter": "cve@mitre.org", "title": "CVE-2014-8487", "type": "cve", "viewCount": 1}, "differentElements": ["extraReferences"], "edition": 5, "lastseen": "2020-12-09T19:58:28"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "kony:enterprise_mobile_management", "name": "kony enterprise mobile management", "operator": "le", "version": "1.2"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:kony:enterprise_mobile_management:1.2"], "cpe23": ["cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*"], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*", "versionEndIncluding": "1.2", "vulnerable": true}], "operator": "OR"}]}, "cvelist": ["CVE-2014-8487"], "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-200"], "description": "Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.", "edition": 6, "enchantments": {"dependencies": {"modified": "2021-02-02T06:14:35", "references": [{"idList": ["PACKETSTORM:130486"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:VULN:14346", "SECURITYVULNS:DOC:31870"], "type": "securityvulns"}], "rev": 2}, "score": {"modified": "2021-02-02T06:14:35", "rev": 2, "value": 5.8, "vector": "NONE"}}, "extraReferences": [{"name": "72714", "refsource": "BID", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/72714"}, {"name": "20150222 CVE-2014-8487: Kony EMM insecurity Direct Object Reference", "refsource": "BUGTRAQ", "tags": [], "url": "http://www.securityfocus.com/archive/1/534739/100/0/threaded"}], "hash": "f6750c91a65ada5f25108d57b33781c34b63bf5024fe00c428c74c1e312a8219", "hashmap": [{"hash": "a2df757bfbc7033d459a0cc657b5fa02", "key": "modified"}, {"hash": "d9b2b1e42289eca78ade610440db686a", "key": "cpe23"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "4e24e7f6350643dd9630a8ce15f400fe", "key": "references"}, {"hash": "aad744ffc51e259aee9adab6cfc38a74", "key": "cpeConfiguration"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "6d016d155749cfa25d7ff1ad47413f42", "key": "cvelist"}, {"hash": "33a0c0308dd9385baf509771961990cf", "key": "published"}, {"hash": "cfb8d4f17b2559d0463b013cc41c97ac", "key": "description"}, {"hash": "5d0e4c44fad0b13a2c2ad21ea49dd378", "key": "extraReferences"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9b2a3159b4a4c3c620a78fe821539e8d", "key": "cvss2"}, {"hash": "4bf04e334e9e27742e0400017b733139", "key": "cpe"}, {"hash": "e258b79b31d39a327c9dafeb61b7a729", "key": "cvss"}, {"hash": "9648ab108c5cc02d0af5a1c3612e80f4", "key": "affectedSoftware"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "b647a850fd42b235dd11ee60cf626f2d", "key": "cwe"}, {"hash": "bfa064768a3eb27207c59b62310ddf39", "key": "title"}, {"hash": "851c9a9351f1083c9a029bee2204f4ec", "key": "href"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8487", "id": "CVE-2014-8487", "immutableFields": [], "lastseen": "2021-02-02T06:14:35", "modified": "2018-10-09T19:54:00", "objectVersion": "1.5", "published": "2015-02-24T15:59:00", "references": ["http://www.securityfocus.com/archive/1/534739/100/0/threaded", "http://www.securityfocus.com/bid/72714"], "reporter": "cve@mitre.org", "title": "CVE-2014-8487", "type": "cve", "viewCount": 2}, "different_elements": ["cpeConfiguration"], "edition": 6, "lastseen": "2021-02-02T06:14:35"}, {"bulletin": {"affectedSoftware": [{"name": "kony enterprise_mobile_management", "operator": "le", "version": "1.2"}], "bulletinFamily": "NVD", "cpe": [], "cpe23": [], "cvelist": ["CVE-2014-8487"], "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-200"], "description": "Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.", "edition": 1, "enchantments": {"dependencies": {"modified": "2019-05-29T18:13:49", "references": [{"idList": ["PACKETSTORM:130486"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:VULN:14346", "SECURITYVULNS:DOC:31870"], "type": "securityvulns"}], "rev": 2}, "score": {"modified": "2019-05-29T18:13:49", "rev": 2, "value": 5.8, "vector": "NONE"}}, "hash": "bdcb255ae17f92dc392ee3b3d72931a9ae19e218c87908f42456f0b371593cd3", "hashmap": [{"hash": "a2df757bfbc7033d459a0cc657b5fa02", "key": "modified"}, {"hash": "4e24e7f6350643dd9630a8ce15f400fe", "key": "references"}, {"hash": "6d016d155749cfa25d7ff1ad47413f42", "key": "cvelist"}, {"hash": "33a0c0308dd9385baf509771961990cf", "key": "published"}, {"hash": "db6999274296c8e1314d97951909d5aa", "key": "affectedSoftware"}, {"hash": "cfb8d4f17b2559d0463b013cc41c97ac", "key": "description"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe23"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9b2a3159b4a4c3c620a78fe821539e8d", "key": "cvss2"}, {"hash": "e258b79b31d39a327c9dafeb61b7a729", "key": "cvss"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "b647a850fd42b235dd11ee60cf626f2d", "key": "cwe"}, {"hash": "bfa064768a3eb27207c59b62310ddf39", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}, {"hash": "851c9a9351f1083c9a029bee2204f4ec", "key": "href"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8487", "id": "CVE-2014-8487", "lastseen": "2019-05-29T18:13:49", "modified": "2018-10-09T19:54:00", "objectVersion": "1.3", "published": "2015-02-24T15:59:00", "references": ["http://www.securityfocus.com/archive/1/534739/100/0/threaded", "http://www.securityfocus.com/bid/72714"], "reporter": "cve@mitre.org", "title": "CVE-2014-8487", "type": "cve", "viewCount": 0}, "differentElements": ["cpe23", "cpe", "affectedSoftware"], "edition": 1, "lastseen": "2019-05-29T18:13:49"}, {"bulletin": {"affectedConfiguration": [], "affectedSoftware": [{"cpeName": "kony:enterprise_mobile_management", "name": "kony enterprise mobile management", "operator": "le", "version": "1.2"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:kony:enterprise_mobile_management:1.2"], "cpe23": ["cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*"], "cpeConfiguration": {}, "cvelist": ["CVE-2014-8487"], "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cwe": ["CWE-200"], "description": "Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.", "edition": 2, "enchantments": {"dependencies": {"modified": "2020-09-21T14:15:45", "references": [{"idList": ["PACKETSTORM:130486"], "type": "packetstorm"}, {"idList": ["SECURITYVULNS:VULN:14346", "SECURITYVULNS:DOC:31870"], "type": "securityvulns"}], "rev": 2}, "score": {"modified": "2020-09-21T14:15:45", "rev": 2, "value": 5.8, "vector": "NONE"}}, "hash": "09b26472476d520eda1ea0c0df9e29f0b6f4fded408041ee421933a47a0ad31b", "hashmap": [{"hash": "a2df757bfbc7033d459a0cc657b5fa02", "key": "modified"}, {"hash": "d9b2b1e42289eca78ade610440db686a", "key": "cpe23"}, {"hash": "4e24e7f6350643dd9630a8ce15f400fe", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "affectedConfiguration"}, {"hash": "6d016d155749cfa25d7ff1ad47413f42", "key": "cvelist"}, {"hash": "33a0c0308dd9385baf509771961990cf", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpeConfiguration"}, {"hash": "cfb8d4f17b2559d0463b013cc41c97ac", "key": "description"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvss3"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9b2a3159b4a4c3c620a78fe821539e8d", "key": "cvss2"}, {"hash": "4bf04e334e9e27742e0400017b733139", "key": "cpe"}, {"hash": "e258b79b31d39a327c9dafeb61b7a729", "key": "cvss"}, {"hash": "9648ab108c5cc02d0af5a1c3612e80f4", "key": "affectedSoftware"}, {"hash": "444c2b4dda4a55437faa8bef1a141e84", "key": "reporter"}, {"hash": "b647a850fd42b235dd11ee60cf626f2d", "key": "cwe"}, {"hash": "bfa064768a3eb27207c59b62310ddf39", "key": "title"}, {"hash": "851c9a9351f1083c9a029bee2204f4ec", "key": "href"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8487", "id": "CVE-2014-8487", "lastseen": "2020-09-21T14:15:45", "modified": "2018-10-09T19:54:00", "objectVersion": "1.3", "published": "2015-02-24T15:59:00", "references": ["http://www.securityfocus.com/archive/1/534739/100/0/threaded", "http://www.securityfocus.com/bid/72714"], "reporter": "cve@mitre.org", "title": "CVE-2014-8487", "type": "cve", "viewCount": 0}, "differentElements": ["cpeConfiguration"], "edition": 2, "lastseen": "2020-09-21T14:15:45"}], "edition": 7, "hashmap": [{"key": "affectedConfiguration", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "affectedSoftware", "hash": "9648ab108c5cc02d0af5a1c3612e80f4"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "4bf04e334e9e27742e0400017b733139"}, {"key": "cpe23", "hash": "d9b2b1e42289eca78ade610440db686a"}, {"key": "cpeConfiguration", "hash": "47ef5b4e34df9b4290e176c0737bd280"}, {"key": "cvelist", "hash": "6d016d155749cfa25d7ff1ad47413f42"}, {"key": "cvss", "hash": "e258b79b31d39a327c9dafeb61b7a729"}, {"key": "cvss2", "hash": "9b2a3159b4a4c3c620a78fe821539e8d"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "b647a850fd42b235dd11ee60cf626f2d"}, {"key": "description", "hash": "cfb8d4f17b2559d0463b013cc41c97ac"}, {"key": "extraReferences", "hash": "5d0e4c44fad0b13a2c2ad21ea49dd378"}, {"key": "href", "hash": "851c9a9351f1083c9a029bee2204f4ec"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "a2df757bfbc7033d459a0cc657b5fa02"}, {"key": "published", "hash": "33a0c0308dd9385baf509771961990cf"}, {"key": "references", "hash": "4e24e7f6350643dd9630a8ce15f400fe"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "bfa064768a3eb27207c59b62310ddf39"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "b610b266b240ce4b5d35de5815b29fae2b8085c1b71a58a2c987454d35ff3df4", "viewCount": 6, "enchantments": {"dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:31870", "SECURITYVULNS:VULN:14346"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:130486"]}], "modified": "2021-04-22T23:44:14", "rev": 2}, "score": {"value": 5.8, "vector": "NONE", "modified": "2021-04-22T23:44:14", "rev": 2}}, "objectVersion": "1.5", "cpe": ["cpe:/a:kony:enterprise_mobile_management:1.2"], "affectedSoftware": [{"cpeName": "kony:enterprise_mobile_management", "name": "kony enterprise mobile management", "operator": "le", "version": "1.2"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*"], "cwe": ["CWE-200"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"children": [], "cpe_match": [{"cpe23Uri": "cpe:2.3:a:kony:enterprise_mobile_management:1.2:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.2", "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "72714", "refsource": "BID", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/72714"}, {"name": "20150222 CVE-2014-8487: Kony EMM insecurity Direct Object Reference", "refsource": "BUGTRAQ", "tags": [], "url": "http://www.securityfocus.com/archive/1/534739/100/0/threaded"}], "immutableFields": []}], "packetstorm": [{"id": "PACKETSTORM:130486", "hash": "0dfb9c2bb206d1165cceb851d0511c51", "type": "packetstorm", "bulletinFamily": "exploit", "title": "Kony EMM 1.2 Insecure Direct Object Reference", "description": "", "published": "2015-02-23T00:00:00", "modified": "2015-02-23T00:00:00", "cvss": {"vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:NONE/A:NONE/", "score": 4.0}, "href": "https://packetstormsecurity.com/files/130486/Kony-EMM-1.2-Insecure-Direct-Object-Reference.html", "reporter": "Michael Hendrickx", "references": [], "cvelist": ["CVE-2014-8487"], "lastseen": "2016-12-05T22:22:21", "history": [], "viewCount": 3, "enchantments": {"score": {"value": 5.7, "vector": "NONE", "modified": "2016-12-05T22:22:21", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2014-8487"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:14346", "SECURITYVULNS:DOC:31870"]}], "modified": "2016-12-05T22:22:21", "rev": 2}}, "objectVersion": "1.5", "sourceHref": "https://packetstormsecurity.com/files/download/130486/konyemm-insecure.txt", "sourceData": "`------------------------------------------------------------------------ \nProduct: Enterprise Mobile Management \nVendor: Kony \nVulnerable Version(s): Kony EMM 1.2 and probably older versions \nTested Version: Drupal Kony EMM 1.2 \nAdvisory Publication: 24 December 2014 \nVendor Notification: 8 December 2014 \nVulnerability Type: Insecure Direct Object References \nCVE Reference: CVE-2014-8487 \nRisk Level: Low Solution \nStatus: Solution not yet released \nDiscovered and Provided: Michael Hendrickx, Help AG \n------------------------------------------------------------------------ \n \nAbout the vendor: \nKony EMM is a mobile management suite that allows organizations to manage employee's personal devices. It enables users to use their own device, or as often called BYOD or \"bring your own device\". \n \nAbout the vulnerability: \nDuring a pentest we discovered that a logged in user can access arbitrary information such as messages and phone information about every phone that's enrolled ot the solution. Often the user's colleagues: \n \n1.) Arbitrary Message retrieval \nBy using the following URL: \n \nhttps://<kony_emm>/emm/selfservice/managedevice/getMessageBody?messageId=<message ID> \n \nWhere <message ID> is an integer, an attacker can retrieve all messages sent to every mobile enrolled on the system. \n \n2.) Information retrieval \n \nBy going to the following URL \n \nhttps://<kony_emm>/emm/selfservice/devicemgmt/getDeviceInfoTab.htm?requestId=<request_id>&...\" \n \nAn attacker can retrieve earlier \"requests\". A request \"task\" is generated when a person requests more information about his/her phone, such as IMEI numbers, phone, last locations, etc. \n \n----------------------- \n \nSolution: \n \nThe vendor was notified, contact the vendor for the patch details \n \nReferences: \n \n[1] help AG middle East http://www.helpag.com/ \n[2] Kony https://kony.com/ \n`\n", "_object_type": "robots.models.packetstorm.PacketstormBulletin", "_object_types": ["robots.models.packetstorm.PacketstormBulletin", "robots.models.base.Bulletin"], "immutableFields": []}], "securityvulns": [{"id": "SECURITYVULNS:VULN:14346", "bulletinFamily": "software", "title": "Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;", "description": "PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.", "published": "2015-03-23T00:00:00", "modified": "2015-03-23T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14346", "reporter": " ", "references": ["https://vulners.com/securityvulns/securityvulns:doc:31852", "https://vulners.com/securityvulns/securityvulns:doc:31869", "https://vulners.com/securityvulns/securityvulns:doc:31864", "https://vulners.com/securityvulns/securityvulns:doc:31866", "https://vulners.com/securityvulns/securityvulns:doc:31870", "https://vulners.com/securityvulns/securityvulns:doc:31853", "https://vulners.com/securityvulns/securityvulns:doc:31860", "https://vulners.com/securityvulns/securityvulns:doc:31851", "https://vulners.com/securityvulns/securityvulns:doc:31847", "https://vulners.com/securityvulns/securityvulns:doc:31845", "https://vulners.com/securityvulns/securityvulns:doc:31857", "https://vulners.com/securityvulns/securityvulns:doc:31859", "https://vulners.com/securityvulns/securityvulns:doc:31874", "https://vulners.com/securityvulns/securityvulns:doc:31848", "https://vulners.com/securityvulns/securityvulns:doc:31867", "https://vulners.com/securityvulns/securityvulns:doc:31855", "https://vulners.com/securityvulns/securityvulns:doc:31872", "https://vulners.com/securityvulns/securityvulns:doc:31846", "https://vulners.com/securityvulns/securityvulns:doc:31871", "https://vulners.com/securityvulns/securityvulns:doc:31863", "https://vulners.com/securityvulns/securityvulns:doc:31850", "https://vulners.com/securityvulns/securityvulns:doc:31856", "https://vulners.com/securityvulns/securityvulns:doc:31862", "https://vulners.com/securityvulns/securityvulns:doc:31854", "https://vulners.com/securityvulns/securityvulns:doc:31849", "https://vulners.com/securityvulns/securityvulns:doc:31868", "https://vulners.com/securityvulns/securityvulns:doc:31858", "https://vulners.com/securityvulns/securityvulns:doc:31865", "https://vulners.com/securityvulns/securityvulns:doc:31861"], "cvelist": ["CVE-2014-9057", "CVE-2015-1165", "CVE-2015-1220", "CVE-2015-1218", "CVE-2015-1214", "CVE-2015-2275", "CVE-2015-1223", "CVE-2015-1231", "CVE-2015-1217", "CVE-2015-1592", "CVE-2015-1213", "CVE-2014-9472", "CVE-2015-1227", "CVE-2015-1464", "CVE-2015-2062", "CVE-2015-1228", "CVE-2015-1224", "CVE-2015-1215", "CVE-2015-1222", "CVE-2013-2184", "CVE-2014-8487", "CVE-2015-1219", "CVE-2015-1229", "CVE-2015-1221", "CVE-2015-1216", "CVE-2015-1238", "CVE-2015-1230", "CVE-2015-1306", "CVE-2015-1026"], "type": "securityvulns", "lastseen": "2021-06-08T18:44:50", "history": [{"bulletin": {"affectedSoftware": [{"name": "Manage Engine AD Audit Manager Plus", "operator": "eq", "version": "6270"}, {"name": "Community Gallery", "operator": "eq", "version": "2.0"}, {"name": "ocPortal", "operator": "eq", "version": "9.0"}, {"name": "WeBid", "operator": "eq", "version": "1.1"}, {"name": "sympa", "operator": "eq", "version": "6.1"}, {"name": "ADPlugg", "operator": "eq", "version": "1.1"}, {"name": "Betster", "operator": "eq", "version": "1.0"}, {"name": "TangoBB", "operator": "eq", "version": "1.5"}, {"name": "tcllib", "operator": "eq", "version": "1.16"}, {"name": "Kony EMM", "operator": "eq", "version": "1.2"}, {"name": "ATutor LCMS", "operator": "eq", "version": "2.2"}, {"name": "MovableType", "operator": "eq", "version": "5.1"}, {"name": "Serendipity", "operator": "eq", "version": "2.0"}, {"name": "OpenCms", "operator": "eq", "version": "9.5"}, {"name": "Media Cleaner", "operator": "eq", "version": "2.2"}, {"name": "WPML", "operator": "eq", "version": "3.1"}, {"name": "ProjectSend", "operator": "eq", "version": "561"}, {"name": "typo3", "operator": "eq", "version": "4.3"}, {"name": "Huge IT Slider", "operator": "eq", "version": "2.6"}, {"name": "Google Analytics by Yoast", "operator": "eq", "version": "5.3"}, {"name": "Request Tracker", "operator": "eq", "version": "4.2"}, {"name": "EnanoCMS", "operator": "eq", "version": "1.1"}, {"name": "HelpDezk", "operator": "eq", "version": "1.0"}, {"name": "Ultimate PHP Board", "operator": "eq", "version": "2.2"}], "bulletinFamily": "software", "cvelist": ["CVE-2014-9057", "CVE-2015-1165", "CVE-2015-1220", "CVE-2015-1218", "CVE-2015-1214", "CVE-2015-2275", "CVE-2015-1223", "CVE-2015-1231", "CVE-2015-1217", "CVE-2015-1592", "CVE-2015-1213", "CVE-2014-9472", "CVE-2015-1227", "CVE-2015-1464", "CVE-2015-2062", "CVE-2015-1228", "CVE-2015-1224", "CVE-2015-1215", "CVE-2015-1222", "CVE-2013-2184", "CVE-2014-8487", "CVE-2015-1219", "CVE-2015-1229", "CVE-2015-1221", "CVE-2015-1216", "CVE-2015-1238", "CVE-2015-1230", "CVE-2015-1306", "CVE-2015-1026"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.", "edition": 1, "enchantments": {"dependencies": {"modified": "2018-08-31T11:09:59", "references": [{"idList": ["OPENSUSE-2015-228.NASL", "FEDORA_2015-4666.NASL", "FEDORA_2015-4698.NASL", "GOOGLE_CHROME_41_0_2272_76.NASL", "GENTOO_GLSA-201503-12.NASL", "UBUNTU_USN-2521-1.NASL", "FREEBSD_PKG_8505E013C2B311E4875D000C6E25E3E9.NASL", "DEBIAN_DSA-3183.NASL", "REDHAT-RHSA-2015-0627.NASL", "MACOSX_GOOGLE_CHROME_41_0_2272_76.NASL"], "type": "nessus"}, {"idList": ["EXPLOITPACK:FFC5409E8001FBF5C3A4ABD743194E19"], "type": "exploitpack"}, {"idList": ["ASA-201503-5"], "type": "archlinux"}, {"idList": ["SECURITYVULNS:DOC:31854", "SECURITYVULNS:DOC:31848", "SECURITYVULNS:DOC:31874", "SECURITYVULNS:DOC:31867", "SECURITYVULNS:DOC:31857", "SECURITYVULNS:DOC:31865", "SECURITYVULNS:DOC:31858", "SECURITYVULNS:DOC:31872", "SECURITYVULNS:DOC:31850", "SECURITYVULNS:DOC:31866", "SECURITYVULNS:DOC:31864", "SECURITYVULNS:DOC:31855", "SECURITYVULNS:DOC:31868", "SECURITYVULNS:DOC:31861", "SECURITYVULNS:DOC:31856", "SECURITYVULNS:DOC:31846", "SECURITYVULNS:DOC:31860", "SECURITYVULNS:DOC:31870", "SECURITYVULNS:DOC:31849", "SECURITYVULNS:DOC:31862", "SECURITYVULNS:DOC:31852", "SECURITYVULNS:DOC:31869", "SECURITYVULNS:DOC:31871", "SECURITYVULNS:DOC:31845", "SECURITYVULNS:DOC:31851", "SECURITYVULNS:DOC:31853", "SECURITYVULNS:DOC:31863", "SECURITYVULNS:DOC:31847", "SECURITYVULNS:DOC:31859"], "type": "securityvulns"}, {"idList": ["KLA10463"], "type": "kaspersky"}, {"idList": ["OPENVAS:1361412562310805505", "OPENVAS:1361412562310703183", "OPENVAS:1361412562310842120", "OPENVAS:1361412562310805503", "OPENVAS:703183", "OPENVAS:1361412562310850643", "OPENVAS:703176", "OPENVAS:1361412562310805504", "OPENVAS:1361412562310121366", "OPENVAS:1361412562310869682"], "type": "openvas"}, {"idList": ["THREATPOST:DD4B8BE5C0517D67B4F100DACE2F22CB"], "type": "threatpost"}, {"idList": ["WPVDB-ID:E5175059-5700-4483-8CBD-6ACCEE262E44"], "type": "wpvulndb"}, {"idList": ["DEBIAN:DLA-158-1:1D872", "DEBIAN:DSA-3183-1:59B04", "DEBIAN:DSA-3176-1:E3022"], "type": "debian"}, {"idList": ["CVE-2014-9057", "CVE-2015-2275", "CVE-2015-1231", "CVE-2015-1217", "CVE-2014-9472", "CVE-2015-1227", "CVE-2015-2062", "CVE-2015-1224", "CVE-2014-8487", "CVE-2015-1229"], "type": "cve"}, {"idList": ["HTB23250"], "type": "htbridge"}, {"idList": ["EDB-ID:41697", "EDB-ID:36368"], "type": "exploitdb"}, {"idList": ["RHSA-2015:0627"], "type": "redhat"}, {"idList": ["GLSA-201503-12"], "type": "gentoo"}, {"idList": ["MSF:EXPLOIT/UNIX/WEBAPP/SIXAPART_MOVABLETYPE_STORABLE_EXEC"], "type": "metasploit"}, {"idList": ["OPENSUSE-SU-2015:0505-1"], "type": "suse"}, {"idList": ["ZDI-15-089"], "type": "zdi"}, {"idList": ["FEDORA:CE57A60BA8FE", "FEDORA:C9C4D60570C5"], "type": "fedora"}, {"idList": ["1337DAY-ID-23382", "1337DAY-ID-23374"], "type": "zdt"}, {"idList": ["PACKETSTORM:131860", "PACKETSTORM:130766", "PACKETSTORM:130796", "PACKETSTORM:130737", "PACKETSTORM:130486"], "type": "packetstorm"}, {"idList": ["USN-2521-1"], "type": "ubuntu"}, {"idList": ["8505E013-C2B3-11E4-875D-000C6E25E3E9", "D08F6002-C588-11E4-8495-6805CA0B3D42", "451A6C79-C92B-11E4-A835-000C292EE6B8"], "type": "freebsd"}], "rev": 2}, "score": {"modified": "2018-08-31T11:09:59", "rev": 2, "value": 6.7, "vector": "NONE"}}, "hash": "cadbf8ccabe53c45d04354c341a88ca5880285cb241ea7aad59a1d875fe8cea7", "hashmap": [{"hash": "fc28dc759f6f8ce72cd1e42bd3d83fda", "key": "cvelist"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "immutableFields"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "c61e5d59aa5c4e535b518cca44e00a6f", "key": "description"}, {"hash": "f9fa10ba956cacf91d7878861139efb9", "key": "bulletinFamily"}, {"hash": "161cc50a85d477fb395e3fc8665241be", "key": "href"}, {"hash": "7215ee9c7d9dc229d2921a40e899ec5f", "key": "reporter"}, {"hash": "0a3ed9eedd330d4b7647a303d9bc7b46", "key": "references"}, {"hash": "7099c008c7052ddcc5769a7c43cd5ce0", "key": "affectedSoftware"}, {"hash": "13d278b957bff02a92f3a8dc1e179309", "key": "modified"}, {"hash": "9caff91e9ebcf551c6d0d9d96b286138", "key": "title"}, {"hash": "13d278b957bff02a92f3a8dc1e179309", "key": "published"}, {"hash": "d54751dd75af2ea0147b462b3e001cd0", "key": "type"}], "history": [], "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:14346", "id": "SECURITYVULNS:VULN:14346", "immutableFields": [], "lastseen": "2018-08-31T11:09:59", "modified": "2015-03-23T00:00:00", "objectVersion": "1.5", "published": "2015-03-23T00:00:00", "references": ["https://vulners.com/securityvulns/securityvulns:doc:31852", "https://vulners.com/securityvulns/securityvulns:doc:31869", "https://vulners.com/securityvulns/securityvulns:doc:31864", "https://vulners.com/securityvulns/securityvulns:doc:31866", "https://vulners.com/securityvulns/securityvulns:doc:31870", "https://vulners.com/securityvulns/securityvulns:doc:31853", "https://vulners.com/securityvulns/securityvulns:doc:31860", "https://vulners.com/securityvulns/securityvulns:doc:31851", "https://vulners.com/securityvulns/securityvulns:doc:31847", "https://vulners.com/securityvulns/securityvulns:doc:31845", "https://vulners.com/securityvulns/securityvulns:doc:31857", "https://vulners.com/securityvulns/securityvulns:doc:31859", "https://vulners.com/securityvulns/securityvulns:doc:31874", "https://vulners.com/securityvulns/securityvulns:doc:31848", "https://vulners.com/securityvulns/securityvulns:doc:31867", "https://vulners.com/securityvulns/securityvulns:doc:31855", "https://vulners.com/securityvulns/securityvulns:doc:31872", "https://vulners.com/securityvulns/securityvulns:doc:31846", "https://vulners.com/securityvulns/securityvulns:doc:31871", "https://vulners.com/securityvulns/securityvulns:doc:31863", "https://vulners.com/securityvulns/securityvulns:doc:31850", "https://vulners.com/securityvulns/securityvulns:doc:31856", "https://vulners.com/securityvulns/securityvulns:doc:31862", "https://vulners.com/securityvulns/securityvulns:doc:31854", "https://vulners.com/securityvulns/securityvulns:doc:31849", "https://vulners.com/securityvulns/securityvulns:doc:31868", "https://vulners.com/securityvulns/securityvulns:doc:31858", "https://vulners.com/securityvulns/securityvulns:doc:31865", "https://vulners.com/securityvulns/securityvulns:doc:31861"], "reporter": " ", "title": "Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;", "type": "securityvulns", "viewCount": 109}, "different_elements": ["affectedSoftware"], "edition": 1, "lastseen": "2018-08-31T11:09:59"}], "edition": 2, "hashmap": [{"key": "affectedSoftware", "hash": "c1c9a53d1dc61bd208ca5bbdf9fc2e8e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "fc28dc759f6f8ce72cd1e42bd3d83fda"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "c61e5d59aa5c4e535b518cca44e00a6f"}, {"key": "href", "hash": "161cc50a85d477fb395e3fc8665241be"}, {"key": "immutableFields", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "modified", "hash": "13d278b957bff02a92f3a8dc1e179309"}, {"key": "published", "hash": "13d278b957bff02a92f3a8dc1e179309"}, {"key": "references", "hash": "0a3ed9eedd330d4b7647a303d9bc7b46"}, {"key": "reporter", "hash": "7215ee9c7d9dc229d2921a40e899ec5f"}, {"key": "title", "hash": "9caff91e9ebcf551c6d0d9d96b286138"}, {"key": "type", "hash": "d54751dd75af2ea0147b462b3e001cd0"}], "hash": "4b4bdadbc94237683e6019475dcac3af57b9a84f5a34329d3229f09d0cfd0ebd", "viewCount": 109, "enchantments": {"dependencies": {"references": [{"type": "nessus", "idList": ["UBUNTU_USN-2521-1.NASL", "DEBIAN_DSA-3183.NASL", "FREEBSD_PKG_8505E013C2B311E4875D000C6E25E3E9.NASL", "GOOGLE_CHROME_41_0_2272_76.NASL", "OPENSUSE-2015-228.NASL", "REDHAT-RHSA-2015-0627.NASL", "8684.PASL", "FREEBSD_PKG_D08F6002C58811E484956805CA0B3D42.NASL", "MACOSX_GOOGLE_CHROME_41_0_2272_76.NASL", "GENTOO_GLSA-201503-12.NASL"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:31856", "SECURITYVULNS:DOC:31847", "SECURITYVULNS:DOC:31872", "SECURITYVULNS:DOC:31857", "SECURITYVULNS:DOC:31859", "SECURITYVULNS:DOC:31853", "SECURITYVULNS:DOC:31845", "SECURITYVULNS:DOC:31867", "SECURITYVULNS:DOC:31866", "SECURITYVULNS:DOC:31864", "SECURITYVULNS:DOC:31846", "SECURITYVULNS:DOC:31854", "SECURITYVULNS:DOC:31860", "SECURITYVULNS:DOC:31858", "SECURITYVULNS:DOC:31855", "SECURITYVULNS:DOC:31852", "SECURITYVULNS:DOC:31863", "SECURITYVULNS:DOC:31871", "SECURITYVULNS:DOC:31869", "SECURITYVULNS:DOC:31862", "SECURITYVULNS:DOC:31861", "SECURITYVULNS:DOC:31848", "SECURITYVULNS:DOC:31870", "SECURITYVULNS:DOC:31868", "SECURITYVULNS:DOC:31850", "SECURITYVULNS:DOC:31865", "SECURITYVULNS:DOC:31849", "SECURITYVULNS:DOC:31851", "SECURITYVULNS:DOC:31874"]}, {"type": "ubuntu", "idList": ["USN-2521-1"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310121366", "OPENVAS:1361412562310842120", "OPENVAS:703176", "OPENVAS:703183", "OPENVAS:1361412562310805503", "OPENVAS:1361412562310805504", "OPENVAS:1361412562310703183", "OPENVAS:1361412562310869161", "OPENVAS:1361412562310805505", "OPENVAS:1361412562310850643"]}, {"type": "redhat", "idList": ["RHSA-2015:0627"]}, {"type": "suse", "idList": ["OPENSUSE-SU-2015:0505-1"]}, {"type": "gentoo", "idList": ["GLSA-201503-12"]}, {"type": "freebsd", "idList": ["D08F6002-C588-11E4-8495-6805CA0B3D42", "8505E013-C2B3-11E4-875D-000C6E25E3E9"]}, {"type": "archlinux", "idList": ["ASA-201503-5"]}, {"type": "threatpost", "idList": ["THREATPOST:DD4B8BE5C0517D67B4F100DACE2F22CB"]}, {"type": "kaspersky", "idList": ["KLA10463"]}, {"type": "cve", "idList": ["CVE-2015-1224", "CVE-2015-1231", "CVE-2015-1227", "CVE-2015-1229", "CVE-2015-2275", "CVE-2014-8487", "CVE-2015-2062", "CVE-2014-9472", "CVE-2014-9057", "CVE-2015-1230"]}, {"type": "ubuntucve", "idList": ["UB:CVE-2015-1223", "UB:CVE-2014-9472", "UB:CVE-2015-1231", "UB:CVE-2015-1230", "UB:CVE-2015-1217", "UB:CVE-2015-1224", "UB:CVE-2015-1220", "UB:CVE-2015-1227", "UB:CVE-2015-1229", "UB:CVE-2014-9057"]}, {"type": "debian", "idList": ["DEBIAN:DSA-3176-1:E3022", "DEBIAN:DSA-3183-1:59B04", "DEBIAN:DLA-158-1:1D872"]}, {"type": "fedora", "idList": ["FEDORA:CE57A60BA8FE", "FEDORA:C9C4D60570C5"]}], "modified": "2021-06-08T18:44:50", "rev": 2}, "score": {"value": 5.9, "vector": "NONE", "modified": "2021-06-08T18:44:50", "rev": 2}}, "objectVersion": "1.5", "affectedSoftware": [{"name": "media cleaner", "operator": "eq", "version": "2.2"}, {"name": "opencms", "operator": "eq", "version": "9.5"}, {"name": "tangobb", "operator": "eq", "version": "1.5"}, {"name": "manage engine ad audit manager plus", "operator": "eq", "version": "6270"}, {"name": "adplugg", "operator": "eq", "version": "1.1"}, {"name": "projectsend", "operator": "eq", "version": "561"}, {"name": "sympa", "operator": "eq", "version": "6.1"}, {"name": "huge it slider", "operator": "eq", "version": "2.6"}, {"name": "betster", "operator": "eq", "version": "1.0"}, {"name": "serendipity", "operator": "eq", "version": "2.0"}, {"name": "wpml", "operator": "eq", "version": "3.1"}, {"name": "kony emm", "operator": "eq", "version": "1.2"}, {"name": "ultimate php board", "operator": "eq", "version": "2.2"}, {"name": "movabletype", "operator": "eq", "version": "5.1"}, {"name": "atutor lcms", "operator": "eq", "version": "2.2"}, {"name": "helpdezk", "operator": "eq", "version": "1.0"}, {"name": "google analytics by yoast", "operator": "eq", "version": "5.3"}, {"name": "tcllib", "operator": "eq", "version": "1.16"}, {"name": "enanocms", "operator": "eq", "version": "1.1"}, {"name": "ocportal", "operator": "eq", "version": "9.0"}, {"name": "request tracker", "operator": "eq", "version": "4.2"}, {"name": "community gallery", "operator": "eq", "version": "2.0"}, {"name": "typo3", "operator": "eq", "version": "4.3"}, {"name": "webid", "operator": "eq", "version": "1.1"}], "immutableFields": [], "scheme": null, "cvss2": {}, "cvss3": {}}]}