CVE-2014-5300

Adaptive Computing Moab < 7.2.9 and 8 < 8.0.0 - Unauthenticated Authentication Bypass via Message Without Signature

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-5300. PoCs published by MWR InfoSecurity.

AI-analyzed exploit summary This exploit demonstrates an authentication bypass in Moab workload manager by omitting the <Signature> element in XML requests, allowing arbitrary command execution as any user, including root. The PoC includes a crafted XML payload to enable root job submissions.

Description

Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute commands via a message without a signature.

Exploits (1)

exploitdb WORKING POC
by MWR InfoSecurity · textwebappsmultiple
https://www.exploit-db.com/exploits/34865

This exploit demonstrates an authentication bypass in Moab workload manager by omitting the <Signature> element in XML requests, allowing arbitrary command execution as any user, including root. The PoC includes a crafted XML payload to enable root job submissions.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Moab prior to 7.2.9 and Moab 8
No auth needed
Prerequisites: Network access to Moab server · Ability to send crafted XML requests
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/70173
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/533574/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/96699
Vendor Advisory x_refsource_confirm
http://www.adaptivecomputing.com/security-advisory/
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/34865

Scores

EPSS 0.0736
EPSS Percentile 93.6%

Details

CWE
CWE-287
Status published
Products (2)
adaptivecomputing/moab 8.0
adaptivecomputing/moab < 7.2.8
Published Oct 08, 2014
Tracked Since Feb 18, 2026