PT-2014-2427 · Foreman · Foreman

Andreas Rogge · Publicado 2014-05-08 · Atualizado 2014-05-08 · CVE-2013-0173

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1

Description The issue makes it easier for attackers to guess the root password via a brute force attack because a static salt of "foreman" is used to hash root passwords.

Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-0173

Produtos afetados

Foreman

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-0173 · Nota de Segurança
• http://projects.theforeman.org/issues/2069 · Nota
• http://theforeman.org/security.html · Aviso do Fabricante