Information disclosure in Kony Enterprise Mobile Management
CVE-2014-8487
Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.
Vulnerability class: Information Disclosure
EPSS: 0.010 (59.4th percentile) — read the EPSS interpretation.
Affected products
- Kony Enterprise_mobile_management
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)