CVE-2014-9000

CVE-2014-9000 describes a privilege escalation vulnerability in Mule Enterprise Management Console (MMC) that allows authenticated users to gain administrator privileges and execute arbitrary code. This is due to improper access restrictions on the handler/securityService.rpc endpoint, enabling the addition of new users with elevated permissions. The vulnerability has a CVSS score of 6.5 (medium severity) with a low attack complexity, and its exploitation can lead to partial confidentiality, integrity, and availability compromise. While not actively exploited in the wild, an exploit is publicly available on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.