CVE-2014-5377 – ManageEngine DeviceExpert 5.9 - User Credential Disclosure

https://notcve.org/view.php?id=CVE-2014-5377

04 Sep 2014 — ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request. ReadUsersFromMasterServlet en ManageEngine DeviceExpert anterior a 5.9 build 5981 permite a atacantes remotos obtener las credenciales de las cuentas de los usuarios a través de una solicitud directa. • https://packetstorm.news/files/id/181105 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •