VULNERABILITY INTELLIGENCE

CVE-2014-5375

CVSS score4 MEDIUM
EPSS probability1.68%
CISA KEVNot currently listed
Published2014-10-08
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N

Description

The server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate the message owner matches the submitting user, which allows remote authenticated users to impersonate arbitrary users via the UserId and Owner tags.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references