CVE-2014-9251

Name of the Vulnerable Software and Affected Versions Zenoss Core versions through 5 Beta 3

Description The issue makes it easier for attackers to obtain cleartext password values via a brute-force attack on hash values in the database, due to the use of a weak algorithm to hash passwords.

Recommendations For versions through 5 Beta 3, consider updating the password hashing algorithm to a stronger one to prevent brute-force attacks. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation.