PT-2020-7498
CVE-2013-4441
·
Published
2019-08-26
·
Updated
2020-01-30
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Pwgen version 2.06
Description:
The Phonemes mode in Pwgen generates predictable passwords, making it easier for context-dependent attackers to guess the password via a brute-force attack.
Recommendations:
For Pwgen version 2.06, consider using a different password generation mode to minimize the risk of exploitation.
As a temporary workaround, consider disabling the Phonemes mode until a patch is available.
Avoid using the predictable passwords generated by the Phonemes mode in Pwgen version 2.06.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾