CVE-2014-2347
AMTELCO miSecure Information Exposure
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.
Exploit likelihood
What each source reports
CVE List Score used
AMTELCO miSecure Information Exposure
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.
- Record
CVE-2014-2347- CVSS 2.0
- 7.0
AV:N/AC:M/Au:S/C:C/I:P/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2014-2384
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.
- Record
EUVD-2014-2384- CVSS 2.0
- 7.0 High
AV:N/AC:M/Au:S/C:C/I:P/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-phxp-3wwr-wjfr No score
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote...
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.
- Record
GHSA-phxp-3wwr-wjfr- Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.
- Record
CVE-2014-2347- CVSS 2.0
- 7.0 High
AV:N/AC:M/Au:S/C:C/I:P/A:N - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Weakness
- CWE-200, CWE-264
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | miSecureMessages 4.0.1 - Session Management / Authentication Bypass | 2014-04-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2347 is a vulnerability (CVSS 7.0) in Amtelco Misecuremessages, published May 6, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. No source names a fixed version.