CVE-2014-2354

Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Score

CVSS 2.0 6.0 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-05-30

Last modified

2025-10-03

Weaknesses

CWE-255, CWE-916

Affected products

• Datahub (Cogent)
• Cogent Datahub (Cogentdatahub)

References

• http://cogentdatahub.com/Download_Software.html
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02
• http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02