CVE-2014-6038

The document details two vulnerabilities in ManageEngine EventLog Analyzer: SQL database information disclosure (CVE-2014-6038) and Windows/AS/400 managed hosts Administrator credentials disclosure (CVE-2014-6039). It includes technical details, affected versions, and proof-of-concept URLs to exploit these vulnerabilities.

This Metasploit module exploits CVE-2014-6038 and CVE-2014-6039 to disclose administrator credentials from ManageEngine Eventlog Analyzer by abusing the agentHandler and hostdetails servlets. It retrieves host IDs and uses them to extract usernames and passwords, which are then decoded and reported.