PT-2014-6030
CVE-2014-4623
·
تاريخ النشر
2014-10-25
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
EMC Avamar versions 6.0.x through 7.0.x
Description
The issue allows context-dependent attackers to obtain cleartext passwords via a brute-force attack because UNIX DES crypt is used for password hashing when Password Hardening before version 2.0.0.4 is enabled.
Recommendations
For versions 6.0.x through 7.0.x, update Password Hardening to version 2.0.0.4 or later to address the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾