Security Advisory
CVE-2014-5377
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request.