CVE-2013-1351

Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password.

Score

CVSS 3.1 5.9 Medium

Status

Modified - cve@mitre.org

Published

2020-01-30

Last modified

2024-08-06

Weaknesses

CWE-294

Affected products

• Network Management System (Veraxsystems)

References

• http://www.securityfocus.com/bid/58334
• https://andrewbrooksblog.wordpress.com/2013/03/03/verax-nms-13-cve-2013-1351/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82704