Security Advisory

CVE-2014-5375

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-10-08 19:00:00
Last updated 2024-08-06 11:41:49
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate the message owner matches the submitting user, which allows remote authenticated users to impersonate arbitrary users via the UserId and Owner tags.