4.3
CVSSv2

CVE-2014-3489

Published: 07/07/2014 Updated: 13/02/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) prior to 5.2.4.2 uses a hard-coded salt, which makes it easier for remote malicious users to guess passwords via a brute force attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

redhat cloudforms 3.0 management engine 5.2.1

redhat cloudforms 3.0 management engine

redhat cloudforms 3.0 management engine 5.2.1.6

redhat cloudforms 3.0 management engine 5.2.3.2

redhat cloudforms 3.0 management engine 5.2.2

redhat cloudforms 3.0 management engine 5.2

redhat cloudforms 3.0 management engine 5.2.3

Vendor Advisories

lib/util/miq-passwordrb in Red Hat CloudForms 30 Management Engine (CFME) before 5242 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack ...