CVE-2014-8487
Kony Enterprise Mobile Management < 1.2 - Sensitive Information Exposure via Message/Request ID
Title source: llmDescription
Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/534739/100/0/threaded
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72714
Scores
EPSS
0.0100
EPSS Percentile
58.7%
Details
CWE
CWE-200
Status
published
Products (1)
kony/enterprise_mobile_management
< 1.2
Published
Feb 24, 2015
Tracked Since
Feb 18, 2026