Back to Database
Status published
Medium
CVE-2014-5215
NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote...
Vulnerability Description
NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev_services.jsp or (2) roma/jsp/debug/debug.jsp.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-5215
Credits & Attribution
No credits recorded in the NVD database.
References
- http://seclists.org/fulldisclosure/2014/Dec/78
- https://www.novell.com/support/kb/doc.php?id=7015995
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20141218-2_Novell_NetIQ_Access_Manager_Multiple_Vulnerabilities_v10.txt
- http://packetstormsecurity.com/files/129658/NetIQ-Access-Manager-4.0-SP1-XSS-CSRF-XXE-Injection-Disclosure.html
More from microfocus
View All →CVE-2018-6489
XML External Entity (XXE) vulnerability in Micro Focus Project and...
Critical
9.8
CVE-2017-9281
An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125)...
High
7.5
CVE-2017-14355
A potential security vulnerability has been identified in HPE Connected...
High
7.8
CVE-2016-5228
Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in...
Critical
9.8
CVE-2016-1991
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C...
High
8
Affected Vendor
microfocus
View all reports →Affected Software
access manager
Vulnerable Versions:
4.0, 4.0.1
Timeline
Official Publish:
December 23rd, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.