CVE-2014-0083

Опубликовано: 21 нояб. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0083
Issue Tracking
Patch
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0083
Issue Tracking
Third Party Advisory
https://github.com/ruby-ldap/ruby-net-ldap/commit/b412ca05f6b430eaa1ce97ac95885b4cf187b04a
Patch
https://security-tracker.debian.org/tracker/CVE-2014-0083
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0083
Issue Tracking
Patch
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0083
Issue Tracking
Third Party Advisory
https://github.com/ruby-ldap/ruby-net-ldap/commit/b412ca05f6b430eaa1ce97ac95885b4cf187b04a
Patch
https://security-tracker.debian.org/tracker/CVE-2014-0083
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:net-ldap_project:net-ldap:*:*:*:*:*:ruby:*:*

Версия до 0.16.2 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00066

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-916

Связанные уязвимости

CVE-2014-0083

CVSS3: 5.5

ubuntu

около 6 лет назад

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

CVE-2014-0083

redhat

почти 12 лет назад

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

CVE-2014-0083

CVSS3: 5.5

debian

около 6 лет назад

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSH ...

GHSA-qwgm-mxm4-3q2c

CVSS3: 5.5

github

больше 3 лет назад

net-ldap has weak salt when generating passwords

EPSS

Процентиль: 20%

0.00066

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-916