CVE-2014-8678

CVE-2014-8678 is a file disclosure vulnerability affecting ManageEngine OpUtils before build 71024, specifically within the ConfigSaveServlet. An unauthenticated remote attacker can exploit this flaw by crafting a malicious filename to disclose arbitrary files from the system. With a CVSS score of 7.8 (High), this vulnerability is easily exploitable over the network with low complexity, leading to a complete compromise of confidentiality. Despite its severity, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.