CVE-2013-6445

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2014-04-30

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Enterprise Mrg (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2014-0440.html
• http://rhn.redhat.com/errata/RHSA-2014-0441.html
• http://www.securitytracker.com/id/1030158