CVE-2014-5215 Information disclosure in n/a
Remote authenticated administrators can discover service-account passwords via specific JSP endpoints in NetIQ Access Manager.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-5215?
CVE-2014-5215 is a medium-severity vulnerability in n/a, published on 23 Dec 2014. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev_services.jsp or (2) roma/jsp/debug/debug.jsp.
Weakness: CWE-200
Which versions are affected by CVE-2014-5215?
It affects 1 product.
Products include Microfocus Access Manager.
How do I fix CVE-2014-5215?
No fix has been published for CVE-2014-5215 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-5215 being exploited?
There is no known exploitation of CVE-2014-5215 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2021-22506 Micro Focus Access Manager Information Leakage
- CVE-2026-11878 Reflected Cross-Site Scripting vulnerability in OpenText Access Manager
- CVE-2021-22528 Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1
- CVE-2021-22496 Auth bypass in Access Manager
- CVE-2014-5217 Cross-site request forgery in n/a
Sources
Also known as GHSA-w492-8wmj-crw3.